3b9c6622286d00c7ce24937606242ff62f833ec1ba186a0daedb4b2cef3af3fe

Analysis

max time kernel
149s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 12:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 69KB
Sample261027-pz17mac14t
SHA256 3b9c6622286d00c7ce24937606242ff62f833ec1ba186a0daedb4b2cef3af3fe
MD5 a5c19ca934c37945c8b3c1049996c191
SHA1 b69f019dff59fafaf29ac2210f37838fab90c820
SHA512 d049d2aa6b6da5af1d5cbfa9feb234d170a81576035e64957412287c1015d0cb5f12a0786cc747552ba6a637fda775a8d9a23ffc9e077631ba4a029db171d25d
SSDEEP 1536:OYypaelZkQjrCtMEnGH9G2792d0HTcChCJRi5:O5r0QjGtMEnGH9G252d0HTcChCJ45
TLSH
T17463E87292DC097F172E87E590587218E2EB9B39CF4787A1F7FB101C4F82DA8946351A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4252	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{6A00BE25-DC49-4799-AB16-394444FD2E77}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3152 wrote to memory of 5800	3152	msedge.exe	88
PID 3152 wrote to memory of 1880	3152	msedge.exe	89
PID 3152 wrote to memory of 4252	3152	msedge.exe	90
PID 3152 wrote to memory of 1880	3152	msedge.exe	89
PID 3152 wrote to memory of 1880	3152	msedge.exe	89
PID 3152 wrote to memory of 756	3152	msedge.exe	92
PID 3152 wrote to memory of 756	3152	msedge.exe	92
PID 3152 wrote to memory of 4308	3152	msedge.exe	93
PID 3152 wrote to memory of 1532	3152	msedge.exe	94
PID 3152 wrote to memory of 4308	3152	msedge.exe	93
PID 3152 wrote to memory of 4308	3152	msedge.exe	93
PID 3152 wrote to memory of 1532	3152	msedge.exe	94
PID 3152 wrote to memory of 1532	3152	msedge.exe	94
PID 3152 wrote to memory of 4312	3152	msedge.exe	95
PID 3152 wrote to memory of 4312	3152	msedge.exe	95
PID 3152 wrote to memory of 4312	3152	msedge.exe	95
PID 3152 wrote to memory of 2848	3152	msedge.exe	96
PID 3152 wrote to memory of 2848	3152	msedge.exe	96
PID 3152 wrote to memory of 2848	3152	msedge.exe	96
PID 3152 wrote to memory of 3484	3152	msedge.exe	98
PID 3152 wrote to memory of 4064	3152	msedge.exe	99
PID 3152 wrote to memory of 3484	3152	msedge.exe	98
PID 3152 wrote to memory of 4064	3152	msedge.exe	99
PID 3152 wrote to memory of 5160	3152	msedge.exe	101
PID 3152 wrote to memory of 1736	3152	msedge.exe	104
PID 3152 wrote to memory of 1736	3152	msedge.exe	104
PID 3152 wrote to memory of 1736	3152	msedge.exe	104
PID 3152 wrote to memory of 692	3152	msedge.exe	106
PID 3152 wrote to memory of 1744	3152	msedge.exe	107
PID 3152 wrote to memory of 4536	3152	msedge.exe	108
PID 3152 wrote to memory of 944	3152	msedge.exe	109
PID 3152 wrote to memory of 944	3152	msedge.exe	109
PID 3152 wrote to memory of 3828	3152	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff9ae1bc188,0x7ff9ae1bc194,0x7ff9ae1bc1a0
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,10445137424390269704,4371357203574154163,262144 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,11583678685161319205,7694707745410861852,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,11853573716494140512,3157588200481912554,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:13
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3324,i,4852925748252452792,5276682392893445081,2097152 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3348,i,8242389168526053270,18032651926063377305,2097152 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,13109487628749222821,15691722180001114008,2097152 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,14595908684764789668,14211629905280500259,2097152 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:9
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,1135719842844753589,17387543325056024303,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,1956712144310545257,4875476838020830042,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:14
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12084160936501017088,15739927688853912051,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12084160936501017088,15739927688853912051,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4952,i,16491267497711960143,5098246554544168507,2097152 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,9594992721774453923,12908119816675669864,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,899899884145162055,13649779440410914714,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,3416713070514424156,12567945200148401889,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,6557708231381350888,83516925542487343,524288 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6504,i,11977123649250505318,1338492478581827356,262144 --field-trial-handle=2304,i,6340147246147900856,7933347194151915674,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

109138b8-c902-4df5-ae22-660416c05bce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\109138b8-c902-4df5-ae22-660416c05bce.tmp
Size 38KB
SHA256 c50b7f4e7b6adad924ce551e5fb8159898049f51e1350b65ac443652325ade9a
MD5 061107f4536407d6474779410d223a36
SHA1 d736aecbc9d34454d9d13e4fea68569e2cceda73
SHA512 85a8ecac08495c75a0dfeb8a3f1ec59f682735c1efbc8464a882d1673f867a5f48a35bf47cf224676b71b492ac5fe39067ebc36efa96cc2ff2a522123eb9047b
SSDEEP 768:f/UxvxjgC+93vKwOpRqu5fgGM1TnXMqO/8AaP8:yZj3+93tcfgt1TnxOUAG8
TLSH
T19E03C036B9596C639CF3D380B21AA296AEF144A3C5C51EE499EC7D0E05CB35E430BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cc25195-5727-4462-be0e-d466b6273f55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4cc25195-5727-4462-be0e-d466b6273f55.tmp
Size 34KB
SHA256 b61e61a81fcb18317c749632b23f3d562c8cca6c3b8a1333603c54e481da010a
MD5 500ce6c07b0b88e2fd3712860ea862c0
SHA1 28635a30ac65263935c5d7f0cc45daf40b77b656
SHA512 b54b1d13eca0b5c91235ca83ce64e7360a000b9e61e5e68e490608af42cf76834bfe0f4e3b63defd107f4a78f362e804ae971f0fd671fe242f187845d39fcb51
SSDEEP 768:Y43im4IwOpRqm5fgGM1TnXMqOa8oaTZc+Lc:Y43im60fgt1TnxO79X4
TLSH
T1DCF2AE32F95A9C635CF2D381B20A7252AEF18167CAC81EA8D9DD7D1D01DB24F534B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82d8d2a6-853a-4288-9f21-177081ec5e7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82d8d2a6-853a-4288-9f21-177081ec5e7a.tmp
Size 34KB
SHA256 793d318ed8045d5be00fb81f23b7269d1f92f1add9cc4a181cc4c48a333469f9
MD5 f76658da0f01903c9917a9a258aaa4d1
SHA1 641901596043857760a6439cf2b8e194d5140c42
SHA512 f6427699f322eb60ef6cea56f719fea7a7b05f6586608d843d49bf57def559ef36f4a00e94c59d56e484b96585c5742757539f898a04c09deda78b27caa5acad
SSDEEP 768:+439m4IwOpRqm5fgGM1TnXMqOa8oaTZc+Lc:+439m60fgt1TnxO79X4
TLSH
T149F2AF32B9599C635CF2D381B20A7152BEF18157CAC81EA8D9DD6D1D01DB24F534B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c6185fb-bd76-4b58-a476-1330644f0e08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c6185fb-bd76-4b58-a476-1330644f0e08.tmp
Size 38KB
SHA256 27457855af53e7058565c1e3f930d1486549f7bd38d2601c656365c44eb942a8
MD5 6a1e3eb555e98fb49bfa26a6426ff2f9
SHA1 a1a4c3e37b13a47926a577fcc88c7214df0f24c8
SHA512 784de3befcd8b414bfb62a05a370d83ba93d04ef55bc5a29667798c7c57608cd456feca21261bbdcf5ab888208705b787ff0bf9505b6e034c59dd7732ad92e83
SSDEEP 768:b/UxvxjgC+c3imXIwOpRqf5fgGM1TnXMqOa8Vse:OZj3+c3imvRfgt1TnxO7Vse
TLSH
T16303B036BD59AC235CF3D380B21A6296AEF18563C5C52EA8D9EC6E0D059B35F430BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

0ed9e082-57d7-4c5f-80f7-8fa29fa76110.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ed9e082-57d7-4c5f-80f7-8fa29fa76110.tmp
Size 11KB
SHA256 280830340ebc3656ce06fb232944a00ad41780a4e161bae494f924656c16ac87
MD5 d59c8930356cffe5ef01e7f088c82d06
SHA1 7c22b731fed24c4127f10962c5b67d36bde0e2e2
SHA512 5dc515b427c369436f9d9fd06a4c1e86c4c07abcc0217345e322d58c415e7301f38651d84ae31f6cef0b12e48f9ebb907eef8bc2c7616d3d9d8807a13d4d18b0
SSDEEP 192:sxRqRybU/fN+syhtq5KzoA8p4d/g6+WNIYRLF+3jaGQIgIJ:sxRqmU/fgswIc/5Ijms
TLSH
T1BA32C715AE28A93B9CCBD30DBB567F53D6F9503261D15E48E6FC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f6fb887-bfbf-4766-9da0-57fcf69d24ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f6fb887-bfbf-4766-9da0-57fcf69d24ba.tmp
Size 11KB
SHA256 161555ff4ccab07218d3ba00601db22ea2b456078234b34bb4969f0fe69710e7
MD5 81c589308569dbd541c242d1e890f1b0
SHA1 df5119594337daa079c58dba94f7f585170ff83f
SHA512 d276f2237669158a2de96737dac2abaebbd3a58e43256a4537832fb98dd5f299f7d3847da5ad032d6f1b5abd5ec8a459359142837b5286c6fff4988e818d2c3f
SSDEEP 192:sxRxRybU/fN+s1htq5KzoA8p4d/g6+WNIYRLF+3jaGQIgDMJ:sxRxmU/fgsdIc/5Ijmc
TLSH
T10F32C715AE28A93B9CCBD30DBB567F53E6F9503261D15E48E6FC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32b8d137-c538-4ff5-9947-1b0fc0f5251c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\32b8d137-c538-4ff5-9947-1b0fc0f5251c.tmp
Size 11KB
SHA256 270b69ca892f4177f6400265b371bb1b5841915ad271175c040493699396c376
MD5 03685267c2a2d4442d545a041af64e23
SHA1 1cc16a44a084b1ec98b872985ded773c5871f69f
SHA512 53f447f04c41d610a460fc963c2b669ed7676d351e948d6a6e4460a74917478c5e0df34d53bc758ce8effcc25676ba570e50ac8299b060f4db0984f769905941
SSDEEP 192:sxRxRybU/fN+s1hlq5kzoA8p4d/g6+WNIYRL6S3jaGQIgDuJ:sxRxmU/fgsVAc/5I2mG
TLSH
T1FB32C815AE28A93B9CCBD30DBB567F53E6F9503261D15E48E6FC861C04EB6DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 177f81a292366bd631ad2fa59af00ced36fb9477484ab328d2aaa536115b99e6
MD5 722933998612907f0f06400248b28e36
SHA1 c45c084aa27949d0628add4e6e7ed18e4492f2eb
SHA512 0c1d7be786219b146a1900a312e6013ad9569c3f9d7a34fc83dff09262cbb399ea9a065e094274be428f757c30133696a0e4359ff9b75cd156c5b14d0fe63dda
TLSH
T15B61D646936148A0E7AE217A91D00C873A34B9FDDD830F385794F77828567E962F44F9
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 3fe99a1f8ad0bef94fa9ef1f59a7af67750c0a68445d2093fa29d875a30d9f46
MD5 01e91781b58a3be78c9ef0c6e9f693a5
SHA1 f69cb7596d1f544b20bbf3c659d55a020878daa1
SHA512 219a19a261e8a90b61364bd04919c1fac31a4c782cb0bd3f85641f1868949d59f5e6dd105cba05413fdca6f18e6d3cd64b07937b4d1ea56fb5fa70359372ca31
TLSH
T145612C43976298A1E7AD217AA0D00C833A3475FCCC830F386794F77828963E922F40F9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6e37f9a582d94fac75c6e51db7943858b99578a42947955bc23e123738c8c7b5
MD5 8de86bff9e8d27fdf4941620572591a6
SHA1 8fd3bd406eaa15fea17a7e1b91007ecb8d1ef832
SHA512 8134c3d9406eb64b13bea40e7e7124327320b9fc5c22242558c5e06c59fd77b2fe88b3f1e8f39175dd471f3bb3c6c9d073bb96c58db2e09d0f98f16a528a6032
TLSH
T17D610747936148A0EBAE217A94E00C873A34B9FDDD830F385694F37828467E962F44F9
MD5 SHA1 SHA512 TLSH

Submit Download

9f64edf9-dfff-4227-9b65-2b50a19d02ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9f64edf9-dfff-4227-9b65-2b50a19d02ef.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03834a47-8546-4df6-9fff-95ef204abff6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\03834a47-8546-4df6-9fff-95ef204abff6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

60d11044-e0fe-4f28-8fb8-eba696a94d85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60d11044-e0fe-4f28-8fb8-eba696a94d85.tmp
Size 1KB
SHA256 33d3e9d28e619e3313568cd1b93dc088934519e6f2213cd36f7c535cac0e3347
MD5 0df2c6cfffb3edf825ff705d01e66277
SHA1 3ad6b141532cb750f4caa2338bfe2b433fb264aa
SHA512 fa840ddf8ca080b3eda4c66a6d500837e9b4448f6c1ae51d4b1f4ddb450fce58b1cc0608392c74eae41d9ed06a047cd3189020ddd9df76691378ca82cb42bb2a
TLSH
T1DE219EF7C3F4567D8A4192F467182F1BCE2D0914931C3D5BC5D49B5B93E18B1E24095E
MD5 SHA1 SHA512 TLSH

Submit Download

8bd41e32-1147-4683-ba3f-37d9367a4856.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8bd41e32-1147-4683-ba3f-37d9367a4856.tmp
Size 4KB
SHA256 8da2c09eb53cb033c08b5430cc48e8aa3ebdeb2c91c66c6a1d26853c3819d227
MD5 68bc8fbca9f3b1547fd29daab0785f7b
SHA1 eb014ccf281847b006410dd401fccfabaaac2ea6
SHA512 211f9d725012279ec37a09d17d26e0fa7163209bb0287a51d2be37277a2f3fde91edd812d1fc6f836400a55022a68f6cf4939ef663f752e79e641606e8fcc0e0
SSDEEP 96:DTu12V1fFEeYVZaaGZPZIZz9dBP2wrOXEHIfuOwJ:DTu1A1ieYVZaaGZPZIZhdBP2wrO0HIf6
TLSH
T1FEA1CDB6C7E843BE881196F05A356E2BCE1D151B422C3C5689F8AE4F63F2471D24269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 deae6dfc9e726d1797be601095084dd55aa7b18ec872b3c757776aad566920e4
MD5 7c220954d03a8a054ea8c41f35a6ef11
SHA1 689c1690e7af77b205063e487568c9b7a3c2c7e4
SHA512 c8b8011f28e7f68e163c5aae2ff104cf7528fc4308b49281e53878c876c803ba328df8c27533471afe1c1041242f02f294c7fe5285631b4ed9f99ef86ab86959
SSDEEP 24:Klzs3o/IHKzh21CSydryXngbwQaIFKIh41mSNWhvQjszIzKXhq1aSW1DyXWRKW:KEoIHKV2sTyF1IFK+4AqAIzKRqMXya
TLSH
T1AC91721576374A41B87D350C49D4AA2B8A5236B73069E62B3BAE40A64E3FE054CFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bcd81a7d-d9ea-4d8f-b847-70518d710040.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bcd81a7d-d9ea-4d8f-b847-70518d710040.tmp
Size 23KB
SHA256 2c51261330e096281393caac328ea77f990938e31a2347eec74b3f24005eb171
MD5 def83774605c0c123e6d7fdaf27a9e68
SHA1 4bedd598d7cbd4a8fa29419ba182706a95a6e239
SHA512 ff9fa1da1d9ba7228d249cf13a4b764c8ae1dfdbdfb7e31cc72f8527d7ce6263866750563b658e4237f0772804eacad12f3cd7c3a5a4dd3f355f53cf9c7923bd
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRktroqYA:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VH
TLSH
T175B2DB2F644CCB7E5FC10AAD9C1AAFD76D9802C797548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f35e12b-f248-441d-8c56-865e73946a8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1f35e12b-f248-441d-8c56-865e73946a8c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b5ff1c76-e990-474c-b40d-351c7c745591.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b5ff1c76-e990-474c-b40d-351c7c745591.tmp
Size 37KB
SHA256 808c0b10d7eb1762eb5c080b4b019c2d7f4710b179d9816e96098e2a496b0019
MD5 cf6402173f5e161f39d08920e6235054
SHA1 cfb409f381f6d19a3efee1fd1b0257d54f7d0c6b
SHA512 baf63c196d421e5f165b970cfa1ab328e20ecd6e907844828c822f7e1acc3881f486769b506185821ff03f9855454ebce80c60f27a9d0b588752146f9ad53d7f
SSDEEP 768:5/UxvxjgC+93gBwOpIu5fgGM1TnXMqOeXAaP8:sZj3+93hcfgt1TnxOsAG8
TLSH
T11F03BF36AC556C779CF2D384B30AA2A6AEF14463C6C51EA889EC3D0E05DB35E530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1511d1a-af9c-4115-be65-d85d56864424.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1511d1a-af9c-4115-be65-d85d56864424.tmp
Size 36KB
SHA256 98553f21d7c2a57269b8dc54c972591e90ab3e0ecba974a48804cdc24b790ff7
MD5 b79657df00de580360e5d749a39a4164
SHA1 e00afddf590c902b7a4c7b7fcb2de78847a39370
SHA512 cf0614384fbaa4d21ee5733d9738c10c285a91febbdd1cd587b6013a0887ca7d5205b9a8ad3f8d39585a15afb9830b4d22e14da888de45b8e55babc75f6ccfa7
SSDEEP 768:YFdT3owgom4IwOpR25fgGM1TnXMqOa8oaTZc+Lc:MT3zm0fgt1TnxO79X4
TLSH
T1C3F2AF33A849D8779CF6D780F20E7252AEF181A7C9855EA4E6DD6D0D019B28F134BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87075b4f-1b22-43f2-b090-3b2ce3549631.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\87075b4f-1b22-43f2-b090-3b2ce3549631.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download