c9cb0823df65f7cabb55cb9921d52e5d61cc710c4c17669a0cb6b70417c8fdea

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 3KB
Sample261027-pbct5acy5x
SHA256 c9cb0823df65f7cabb55cb9921d52e5d61cc710c4c17669a0cb6b70417c8fdea
MD5 12c60b8fc2ffdb8972864877a67071f6
SHA1 361716fb1ba688624c0351ca760730fe8306caa0
SHA512 d24c1ee2b6d1ef25bdfd479d4fe434482b4820ca701d45c4c10bb78a61611f87730c8e8228900c7d5cbcea18058367b249de7e91bd3933896afb41485d219bad
TLSH
T17D81CA2108F291F701514AC099767F2EBFD9A103D5A99900B9FD1BCAAFD7E86DC13168
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1596	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{58644797-B7F2-45E9-AE99-31CA1CC82B4C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2024	msedge.exe
2024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 5960 wrote to memory of 6116	5960	msedge.exe	84
PID 5960 wrote to memory of 1596	5960	msedge.exe	85
PID 5960 wrote to memory of 5672	5960	msedge.exe	88
PID 5960 wrote to memory of 5672	5960	msedge.exe	88
PID 5960 wrote to memory of 2464	5960	msedge.exe	86
PID 5960 wrote to memory of 2464	5960	msedge.exe	86
PID 5960 wrote to memory of 2464	5960	msedge.exe	86
PID 5960 wrote to memory of 6044	5960	msedge.exe	89
PID 5960 wrote to memory of 376	5960	msedge.exe	90
PID 5960 wrote to memory of 6044	5960	msedge.exe	89
PID 5960 wrote to memory of 6044	5960	msedge.exe	89
PID 5960 wrote to memory of 376	5960	msedge.exe	90
PID 5960 wrote to memory of 376	5960	msedge.exe	90
PID 5960 wrote to memory of 5236	5960	msedge.exe	93
PID 5960 wrote to memory of 1568	5960	msedge.exe	94
PID 5960 wrote to memory of 5236	5960	msedge.exe	93
PID 5960 wrote to memory of 1568	5960	msedge.exe	94
PID 5960 wrote to memory of 3764	5960	msedge.exe	96
PID 5960 wrote to memory of 4692	5960	msedge.exe	109
PID 5960 wrote to memory of 4712	5960	msedge.exe	110
PID 5960 wrote to memory of 5564	5960	msedge.exe	111
PID 5960 wrote to memory of 2240	5960	msedge.exe	113
PID 5960 wrote to memory of 2240	5960	msedge.exe	113
PID 5960 wrote to memory of 3016	5960	msedge.exe	114
PID 5960 wrote to memory of 3016	5960	msedge.exe	114
PID 5960 wrote to memory of 2024	5960	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff12a3c188,0x7fff12a3c194,0x7fff12a3c1a0
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,7830162818416855455,12479065921743080799,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,9877355410482042141,2949195584592326199,262144 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,13866110798406231238,16445613060442476016,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3228,i,1155880871315841454,7343918127084805288,2097152 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3292,i,10054940150528666545,5816211469458770684,2097152 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,3801528442454302854,9181984568297569477,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,4259363575851703458,639258444319766771,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,15314314414997531252,2927761399106619669,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,15314314414997531252,2927761399106619669,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,6292544019352057674,11897655449411055234,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,15616503655717609768,13199269318517975888,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,2826786262841636475,12590881624164916459,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,7967342102023524907,18391668718560979266,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,2274670767193137389,15864428224500236490,524288 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5028,i,14841781861012243638,7586837462126882717,262144 --field-trial-handle=2292,i,1787019376647444790,6317525692848673076,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1058f1b9-b894-415b-a7bf-4f3ef45db290.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1058f1b9-b894-415b-a7bf-4f3ef45db290.tmp
Size 26KB
SHA256 faeeb4ca7972e82db3c517e8e1faeeaf4772df30509013e0aaa37280425beae1
MD5 cee7bc282f73676884e34d1a69dc80ae
SHA1 81d3ff8181781bfb14af8aded912039eaf04ec92
SHA512 d779c46d29c0ac034d3ba18ff2f50acc97afe3f9b519e4bab66ed12592ac185a91f891aacc41e80e5a4cff2f20a7e4b131394ca99839b7558e41430164ff99fa
SSDEEP 384:nbMiFiZcIN3sNb8TUNTUlI4L5mgBpFuK2fMBOHLtuVnp13vaTZcRHDFgL/7IzKoW:b3FQN3qwgbspBOHLtE3vaTZcRHMp
TLSH
T15DC24A32E8A4C9BBECEB8FA5A74A3603DEF45163C5CC9AC0D9D95D5D009B19D070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1fbefd49-25e4-4e56-ba90-ee935db2c234.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1fbefd49-25e4-4e56-ba90-ee935db2c234.tmp
Size 26KB
SHA256 df3c64ace7796c98f9868a651ac87be65a29eebb24cd16d8d5e24ad413da0958
MD5 a46b12b495a8f3f33fabd2c650cae04c
SHA1 20ceeeed83d68126811de28064132f98018e70e9
SHA512 81a748a444d890676478c440814d9c0bf6c6896d6877ca94dcb158b418309b6555b1af584b7d982ae804f62c11fbe261ec79727787b67dac7924d76edb4e1a19
SSDEEP 384:nKMiFzQkUSvy3sNb8TUNTUlI4W5mgGpFuK2fMBOHLtuVnp13vaTZcRHDFgL/7Izw:K3Fdy3qwg83pBOHLtE3vaTZcRHVLc
TLSH
T13AC25B32E8A8D9BBEDEB8FA1A34A3643DEE05153C5CC9AC4D9C95D5C00DB19D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

225ba7f3-15f8-40f7-8c67-7155b1f5904b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\225ba7f3-15f8-40f7-8c67-7155b1f5904b.tmp
Size 26KB
SHA256 77f39281387c89c348bf5683d55af0cddb55f9ae79c6003f599e0b6f5cc3dc26
MD5 dde5c63d80482ffe80e18cc62fe18e09
SHA1 98a6d883901eb88b6df2f2275afeda9c6b847688
SHA512 60f97330b950bb6e869597e2201bc25bd1589f1721757036196e2dc9dd1b6c553001fd07b72a387fdc2e0051d278dde7520fb998c492fdd4ff6f323b31a3125b
SSDEEP 384:nbMiFzQkUSvy3sNb8TUNTUlI4W5mgGpFuK2fMBOHLtuVnp13vaTZcRHDFgL/7Izw:b3Fdy3qwg83pBOHLtE3vaTZcRHVLc
TLSH
T1CCC25B32E8A8D9BBEDEB8FA1A34A3643DEE05153C5CC9AC4D9C95D5C00DB19D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26a555ec-e502-4f7f-b9cc-dfd5f80ae4be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26a555ec-e502-4f7f-b9cc-dfd5f80ae4be.tmp
Size 26KB
SHA256 7277840bd1566f0ae5ffce669033021c923ba3854bd98a630159b07f32f87535
MD5 09a7ae79d67852864fe33e2383d290ae
SHA1 2b72e586cdf8c35d837153d9acfe2cf0c883a6e6
SHA512 daca45b697149ea29c6f460eeff8b1cf7262ee50144542a655704bb2228294e4763fdc96238dacb93b512f251837191a22aa3208bbef2520cca4b9ac99ba10f2
SSDEEP 384:nQMiFiZcI63sNP8TUNTUlIm25mgHndK2fMBOHLtuVnpn37O6R2FeoxgL/7IzKoG:Q3FQ636wgSEGBOHLtk37TRVl
TLSH
T1D4C25B32E894C9BBECEB8FA5A74A7507DEF44153C58C8AC0D9D82E5D009B59D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e6b90c5-c521-46e5-ad7a-b5bd67b870b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e6b90c5-c521-46e5-ad7a-b5bd67b870b3.tmp
Size 27KB
SHA256 d5350de9023ea21a0c1eb45dcc860951ceb68d909862a093c7bdd6788b70f0c8
MD5 a56a3d438cb11bc53c8d441750e1c539
SHA1 9a2d6268940946b5c87cb879a719e4fc3f0354e4
SHA512 e220994638d76bc229688a96e021b8c2ce6f0ccdf51a7fa8121d4e71b18d3da42f0e77c7236df2270382efc577dc9ead6a9c4269d5dff1b52b4b23e5f7b0020e
SSDEEP 384:nsiFzQkUSvXb3sNb8TUNTUlI4W5mgGpFuK2fMBOHLtuVnp03vaTZcRHDFgL/7Izw:XFdr3qwg83pBOHLtv3vaTZcRHVLc
TLSH
T1B0C24A32E8A8D9BBEDEB8FA1A34A3643DEE05153C5CC9AC4D9C95D5C00DB19D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

150fa31d-77c5-4925-8300-21c2d9c237f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\150fa31d-77c5-4925-8300-21c2d9c237f3.tmp
Size 11KB
SHA256 b8947d4ffca1ed8ee5599dfa68dc5d4c1ee4ac4d3ccdaf328412fdd5a6864f55
MD5 89de4f5ddb362debd39c105f7cd53a34
SHA1 39d587a15dda5f4bb1d7678f3359c49d145bdfa9
SHA512 1ad78bd150962db3e7f69b01c416c28d7b513e484d1b3ad414fa308b3f64eb267c906e74ce31b8ababc03143307443332aa8ae73d69f1e681d4fa94408ad1f56
SSDEEP 192:sxZXR3k9/fis6UQZZwyzodpHFHW6+WNGYbItIVY9xIg5nEJ:sxZXq9/fis6UOZwJlHbGFWY3NI
TLSH
T12942B715AE38A93B8CC7D619FA55BF53D7FD5032A0941E48AAFC8A1C04EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47e563f7-8c35-45be-92c8-f6db74ea9591.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47e563f7-8c35-45be-92c8-f6db74ea9591.tmp
Size 414B
SHA256 8d76cf32be241710cd2ce37730159c19348f8f7d5bbf51db1a5a97ec08a70126
MD5 9e545ea9b197cd423b9387a0b85527fa
SHA1 303fa555dca6a13e5ab1d24a02d4b7b7cd672391
SHA512 9a25790c0d4862af7da289a8142be3c44a63c8172465de0e4fd25cf74e45bcf81907d118bf6e7fd4ceb043be8821b3c3f8e6793558e46f750942c65e77eada05
TLSH
T130E022F9C82AEC3B1CFC0B2850541686EA46035B2F80888B7B3ED00D8FB1A76458786C
MD5 SHA1 SHA512 TLSH

Submit Download

5bd95aea-c131-4b2b-931b-cac72f8159c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5bd95aea-c131-4b2b-931b-cac72f8159c8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7d636ca5-9f87-476a-9b5d-5da970ea37eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7d636ca5-9f87-476a-9b5d-5da970ea37eb.tmp
Size 11KB
SHA256 87e5dd6732ad8cd37be0644933c0d5ad6456e15a6d59381281fd3579e9756a3f
MD5 1e0659415c2748bce2ca6423749d7b23
SHA1 a5b753230b938e408a9fe2e86138e4c2a5fb9c3f
SHA512 20d582f54cdde717ea98f01a5f73da4f0c36b30f1fcf11bcbff6abe23d5d6ed4ffdd3c0f8195387ec6f03eb4d05b55614db20dd4345971c9a2a60ac42db8d7dd
SSDEEP 192:sxZXR3k9/fis6AQZZwyzodpHFHW6+WNGYbIoIVY9xIg5nEJ:sxZXq9/fis6AOZwJlHbGFxY3NI
TLSH
T16442B715AE38A93B8CC7D619FA55BF53D7FD5032A0941E48AAFC8A1C04EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f5b495975709a3b112a3b4dc29c6f8e923fb5481db2f5c33b65295b524726d27
MD5 6878467eef3858bf6c5217b386442a9e
SHA1 aafab99449521fa8bb1d561aaaf0f293a9c3112d
SHA512 dc96bce726f4031f87a842bb74b061a38ac8e1d552bd5c83d4ae43049789e61adfc797393c26853714fc4dd4952adcadb8c48f6d7ccce1bac3b546a387b815e4
TLSH
T195E020C4D5C8C21F515A744B065D774C97D1265F92C07A4D3F00C54C7107540EB91954
MD5 SHA1 SHA512 TLSH

Submit Download

50651758-2ea1-4a64-b0a5-e8a35b956850.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\50651758-2ea1-4a64-b0a5-e8a35b956850.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

08f5ba69-315e-4138-9441-d720449f87ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\08f5ba69-315e-4138-9441-d720449f87ed.tmp
Size 1KB
SHA256 bb49f114a17f5064385f8988825ada8a221feaeab47904ac410c2b4863566d5d
MD5 ef31a14be8d53beaad6c8b385eb6bd40
SHA1 f17dd151477af11bc5f0ff5737481ee2f5272932
SHA512 709f72c9fdb4fa56d1a70be2df33d5e11a464ef7a5f9443b649c924aff741dec3744d80586e45e29a5169c651d7093fdc7a601cd4a0343650fa296070595918a
TLSH
T14C31A1F387F4856E8A0196F0AA14AE1FDF1D0515431C7DA984E4AF2B93E3471E04165B
MD5 SHA1 SHA512 TLSH

Submit Download

0d9e9557-2155-4b9c-816e-5a5978ff8543.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0d9e9557-2155-4b9c-816e-5a5978ff8543.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 1b1c19a54e2e3340a5e3dfa5d099972d1836ff2e55d8917ea897e1bcb11994cb
MD5 c2f74e31ac64cfdb0b10965b7a223ef9
SHA1 8b5d277b65a1ee3241fb9869a71dca068a6e013a
SHA512 6465927e566e50c9770a8d44185d5d5d9924e8e2e3acbf9407a623ff24c78efb540f56572b8c8b8ab4aee4cedcb1a94185849444650e0842499946563c01ae13
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXIzZH:OtfFvpopPxrB4RhfIlH
TLSH
T1A7B2221571BA021038FE690C81B58B2F464232B33159E63B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c8d61f98-05ae-4bd7-99b0-0900408261f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8d61f98-05ae-4bd7-99b0-0900408261f9.tmp
Size 11KB
SHA256 8970b6c67255d06e560ea5db609d8cfd8a5420a9ad351ce54ecf00ad4a5889ec
MD5 380a0ac0bf08606ab3d12c9266e2c960
SHA1 4a9db198bec26f66afba6a78390a9d6b9a4a8c5f
SHA512 b89655849bba6d580f829691a0ca20eb66af0c3fb194f39fef4f6e8844771d18b8eadb2a8705470d007582faa0050ce8dfc51ffd981f227636a6d770b7f63e6e
SSDEEP 192:sxZXR3k9/fiskUQZZwyzodpHFHW6+WNGYbItIVY9xIgjEJ:sxZXq9/fiskUOZwJlHbGFWY3jI
TLSH
T1A442C715AE38A93B8CC7D619FA55BF53D7F95032A0941E48AAFC8A1C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d038c1b4-a4c2-4871-bfc9-8a0d9e17227a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d038c1b4-a4c2-4871-bfc9-8a0d9e17227a.tmp
Size 25KB
SHA256 6943e236578ee3d0f7f6e27fbb3678bc7d964f21fbb3e757e7956e9377ff08c4
MD5 c4b5328feb06627f3737569c4b0bcdaf
SHA1 360ce8e0ddaac3d2b78f65917c9359c0ecb3a329
SHA512 3c82dcbed13d256c6fc6f546a9ec3f7c2aa6725bd59036267507c27ad0705490453675bca4ef49b4f858c79f72e9bc1699103b4c72d4541a8c2e964b853a1a5e
SSDEEP 384:n0MiFiZcI63sNw8TUNTUlIm25mg5GnK2fMBOHLtuVnoA7O6R2FeoxgL/7IzKoG:03FQ63RwgSxQBOHLtRA7TRVl
TLSH
T1ADC25B32EC94C9BBEDEB8F96A74A7A07DEE40163959C89C0DAD85E1D008719D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a73d253bda1784ccd55405fc6289e4974e874ac840abf6fce68fb1e6b67c5b11
MD5 a4a9f70b478d55725d2885942225ad34
SHA1 9e4878760fa2fc7602e47a57e26798b40ff2b920
SHA512 c213423850a69c58fda850a9e60ac74b6b8419ae816430a89cd193d3b80e9d7b2a359e488d3db1fb53af7934ea0c7f8241fc734f1e2fa0ff225e518b41564845
TLSH
T162411858B6E91114B3B76E56ABF3A46E887B79772E06D55E10010E4F0623A04C871737
MD5 SHA1 SHA512 TLSH

Submit Download