9fafc9a540091a61b55d128a740b8225efd6ded9748444ca8253a07151465117

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 06:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 127KB
Sample261030-g5ralsdf77
SHA256 9fafc9a540091a61b55d128a740b8225efd6ded9748444ca8253a07151465117
MD5 a424aa12ec7878e990c2a23c636aaf2b
SHA1 b1409ff8a42ae393c8980ffae0bc468dd05f4d95
SHA512 6e0292faac3330b5db13501ff0dd2641f35539fff0d2d0acfac1a6fce2f905ea69fdfa1ce4ee8d18f3f057c28670bf848c8a4ac86fb0af39ad84d06a0d0bb814
SSDEEP 3072:MzyXjVO4fpHXGx+vPQPnJQPIBQPAimW3bQP3lQP5VQPiKQPaHQPhjkkZQPFgLLVz:xfpHoYvAimWGkiWzhjkkIFn2ZRD
TLSH
T1B6D32120916A746B0337F6C1B9A69B1970D7A12DCA231E00F7FC17AE5FDBC50EB1254A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4156	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{E29C5EB2-57FE-4C6B-894C-29393A7CF3CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 4372	4384	msedge.exe	84
PID 4384 wrote to memory of 4156	4384	msedge.exe	85
PID 4384 wrote to memory of 4876	4384	msedge.exe	86
PID 4384 wrote to memory of 4876	4384	msedge.exe	86
PID 4384 wrote to memory of 4876	4384	msedge.exe	86
PID 4384 wrote to memory of 3716	4384	msedge.exe	87
PID 4384 wrote to memory of 3716	4384	msedge.exe	87
PID 4384 wrote to memory of 816	4384	msedge.exe	88
PID 4384 wrote to memory of 1764	4384	msedge.exe	89
PID 4384 wrote to memory of 816	4384	msedge.exe	88
PID 4384 wrote to memory of 816	4384	msedge.exe	88
PID 4384 wrote to memory of 1764	4384	msedge.exe	89
PID 4384 wrote to memory of 1764	4384	msedge.exe	89
PID 4384 wrote to memory of 2076	4384	msedge.exe	91
PID 4384 wrote to memory of 2076	4384	msedge.exe	91
PID 4384 wrote to memory of 3992	4384	msedge.exe	92
PID 4384 wrote to memory of 2076	4384	msedge.exe	91
PID 4384 wrote to memory of 3992	4384	msedge.exe	92
PID 4384 wrote to memory of 3992	4384	msedge.exe	92
PID 4384 wrote to memory of 880	4384	msedge.exe	96
PID 4384 wrote to memory of 880	4384	msedge.exe	96
PID 4384 wrote to memory of 3272	4384	msedge.exe	97
PID 4384 wrote to memory of 3272	4384	msedge.exe	97
PID 4384 wrote to memory of 2536	4384	msedge.exe	99
PID 4384 wrote to memory of 5100	4384	msedge.exe	108
PID 4384 wrote to memory of 2760	4384	msedge.exe	109
PID 4384 wrote to memory of 2580	4384	msedge.exe	110
PID 4384 wrote to memory of 1584	4384	msedge.exe	112
PID 4384 wrote to memory of 1584	4384	msedge.exe	112
PID 4384 wrote to memory of 1836	4384	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffd0022c188,0x7ffd0022c194,0x7ffd0022c1a0
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,17855933486000561838,204551600998222433,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,17547421299475564908,18014687558822152727,262144 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,12342286269715016746,3013729546456556811,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10727440964013807016,7127339806600594013,2097152 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,6684672933553203008,10842324828976622449,2097152 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,822625647806914067,10153770950189069619,2097152 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,600919696603243782,2213447094441186198,2097152 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,10263973639766254756,124129319759141581,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,16278185967001160862,6454360848568549287,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,4167298620635240718,7597543871210098083,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,4167298620635240718,7597543871210098083,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,7069726715623220157,17816808503693842700,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,17492270588275482132,8658725622265465437,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,10741129476698204888,3920783678998058127,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,17694325442723241288,4225327106640982102,524288 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5372,i,15907582923799650464,13440011928957018165,262144 --field-trial-handle=2152,i,16189782457493071533,17063452620000170162,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

03445c8b-838d-4796-8937-bbf6ca56bf6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03445c8b-838d-4796-8937-bbf6ca56bf6c.tmp
Size 18KB
SHA256 b67be5a4163d8bfd53e7ef35852d718bb1e82d0bcceaae826e1712392ad54605
MD5 319ac1266b79f6eb3d1333b3428f1a90
SHA1 c4d71807b79f84a28799334a53a138ddf49ab145
SHA512 b1db070673f2ba6943d838ed4ffd272a75838a709d4c344be4c2051db33dbb48bab1f013dbab106b9a59ebd8eb87747dd19615ce8dfae1d4abe1abd5e2fd8626
SSDEEP 384:BQkUSv0sNwGrCZActHX58EMOzAAXd2I9MtUnIIld:z0MCf5aHOZXd5EUnLj
TLSH
T1AD827D32E8B96D378DF6A250FA4A35039FA88017D6851F90C6CD7F2D01CE29C234B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d44d8aa-2cbb-4244-a6ef-67040d10a5c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4d44d8aa-2cbb-4244-a6ef-67040d10a5c4.tmp
Size 8KB
SHA256 2a78b6627f9d144695930b7eb479168cda1ae77f6ddd7d00916162c3092525bd
MD5 5e9b162fe2920d9956c0edd948677ad9
SHA1 b54b04d160ee034d0f048a193964bc090204d771
SHA512 e03db63285ba2a0bd38c8eec3f4f7b1f77990bb9e7d28e65e12c708172513e81f618fa71089737341dedf8450d50fe6e5b27fc49ccca36a2194c621d53b4468f
SSDEEP 192:xONp6wlDLQmiUy2nv4X58gZMOKoAA/veWqWwU6:xONp6k93v4X58EMOzAAedU6
TLSH
T191121932B9B8AC3B4EE2A545F58735039FA95127E7457FC0C6DD2E2D01DB6AC234B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

526b976b-327a-4f37-9cc4-94f4e287b2dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\526b976b-327a-4f37-9cc4-94f4e287b2dd.tmp
Size 21KB
SHA256 763db6e379c31c8d05bc88a8ad9d972b7a6547a8051eefe15015c55e8033355b
MD5 b333a4d3216707b4342bc3a7a4c9ad64
SHA1 cfcad552e3b730614a98e8d74740198e931004aa
SHA512 350f373f4a7ddad4cfe5d1439b617f48b0d3e732c1e47138e8de23e7cd2f699bfe81323e9ec0b41ce1ea5d63c2b5a2bd6f3c9e71ed3db6c810b2c4d04a00a2bd
SSDEEP 384:qiFzQkUSv1zsNw8TUNTUlIlGrCZActHX58EMOzAA+d2I9MtUnIIld:hFdNZwg2Cf5aHOZ+d5EUnLj
TLSH
T1DAA24A3298A89D7B9EF69A41FA4A3503CFB44167C685AF90D7CD6E2D01CB2DC234BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

2677d532-25c8-49de-9b54-fb28e086c47a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2677d532-25c8-49de-9b54-fb28e086c47a.tmp
Size 10KB
SHA256 f8cf8a83a4df5de0ede77bb2f25297c21aea0512d67fa3499e875104ddd965b2
MD5 52a602c9391866751879da11aae4f813
SHA1 3b2b05042f118a9cd062dfad71b0ab128f55cc0d
SHA512 404d2fe8ad0392146c0cbd769ae33961e2b218756f99ad391faf740415c72cdae48fd26d693b4fc77ca8853596171933d6fb8c59dd6438e912f3a698f6dd7444
SSDEEP 192:sxZ0RrWb/fLsC7XIdpdwHW6+WNGYr2RVIIg53J:sxZ0Ub/fLsC74SHbGan
TLSH
T1DF22B8526E38697B8CCBD209BB65BF53E6F9503291911E44EBFD8A1C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2af63a58-494f-455a-9f87-6a56bd5d2190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2af63a58-494f-455a-9f87-6a56bd5d2190.tmp
Size 9KB
SHA256 2be8f30b108399091cf13b6ea74766166739d92b27640e9c92eed3f5ce1c83b4
MD5 2f0dd00a272c393c4b134de97de4086e
SHA1 cd21364e86573e5eeceeebeb1547f774fbe55642
SHA512 b95328c683c8f3b86397cc04bd71c24e768906059917104868e0125eab77ac7c09f085a442c7a5896029b18f9160b6da306df7825829ff94c07529e5dc24545d
SSDEEP 192:sxZ0RrWb/fLsVfXIdpdwHW6+WNGYrvTVIIgrJ:sxZ0Ub/fLsVf4SHbGd9
TLSH
T10922A8526E38A97B8CC7D20DBB25BF53D6F9503291951E48EAFD861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a55b645-63eb-4f4f-91b0-3c04c73ab6ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a55b645-63eb-4f4f-91b0-3c04c73ab6ec.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6278d8ce-1a6f-4e70-86b1-10069c4cebb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6278d8ce-1a6f-4e70-86b1-10069c4cebb1.tmp
Size 9KB
SHA256 9e17c58c8093bd4f638919350b8bd84cd04bd8751fd93dc413cfb48d8c8f0857
MD5 033ddcb1cc90c7f8b56fb9f85d698ce5
SHA1 1530e81191ffa04548cfb272cf4717151dce7e37
SHA512 c8be237021e7af312e5977a84a171c128000a56ec4d36d2b4fb2619658436f95ad28577d8974ab80eea695a6c9c59e1043323263dd64606194d26c11d3f1fd12
SSDEEP 192:sxZ0RrWb/fLsCfXIdpdwHW6+WNGYrvTVIIg5dJ:sxZ0Ub/fLsCf4SHbGdB
TLSH
T1A622C8526E38A97B8CCBD209BB25BF53D6F9503291901E48EAFD861C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 960c6c7479656781af9f0b1c44a948b104cae2a67608b07920baf24110fa91ce
MD5 9bf13fc5e3c5abe289fb67e092041d09
SHA1 83ea3ed32b7c1f12da5219c3e8496e5a561bf1b3
SHA512 0cce2eb4311c07985901c432f1d0673d24f98488c16a52680782377cf8fe45d84dd1019195384d0d2ce16af1f3e51128f2e28afc8ef884e39cd7d342f94a217b
TLSH
T10D611C88DBA0407BFB8AA07092DC108736FD409E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c58495d6220d8b04740f5b88fe52070a1d0de603436628fd5b6748cda320d2d
MD5 f0c88a0419fa3e844e4b0dc2c2234ffa
SHA1 5b91efd18fce69523be1579c7da55b62cf36a03a
SHA512 4e683217e1ee432a46a191c034af4d81d05cfb77c5c78d8da8820f3210dd86478c96f775869c6dd18241562a6e078d117c4e953fb8a3e046365525727aadcfbe
TLSH
T1D3611C88DBA0407BFB8AA07096EC108B36FD418E57AFDF5A12F8ECF95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

8232a937-5bb1-4715-8aef-f9677f8b7050.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8232a937-5bb1-4715-8aef-f9677f8b7050.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

57543e7a-1d6d-4e6c-b28e-29f10637c3fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57543e7a-1d6d-4e6c-b28e-29f10637c3fc.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

7b1df2e1-311e-40fb-b955-93941fc5e1f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b1df2e1-311e-40fb-b955-93941fc5e1f3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

de3517ea-3d9b-4a2e-bde4-83319ccf1097.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\de3517ea-3d9b-4a2e-bde4-83319ccf1097.tmp
Size 1KB
SHA256 1619ca9e572cbc1ee883a7f761f3cd88e0490120684775c39a4dc5132148f745
MD5 a950c893d778cf7526feae1c10fbf672
SHA1 3cdfb75bbd59c7d74eda0a70c1c3df28fc9f84aa
SHA512 249d73942380f0ee28f438be855bb7fae657a6ec239d1e87db476f89f5a4de917ff8dd82233733f9fe15e9604c847d185187c7381be2229deb2759d9ca2f3fc8
TLSH
T114219EF783E1966E890156F0EA24AE2BDE1D0516421C3C6589E4BF2793F3075D00265F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 da17bc8576b751b6c50271899fa1514d6871b2c845a64b8f70c7fcfeb63b807d
MD5 45ccd57b7f6698ab50b555f9c786026f
SHA1 8b87c9fc3f0fd1a21bfe06a52e59f853067a68fa
SHA512 948d0404ab95259dfe505b11d3882b9a8620d16ab186b0d8bef274c6fc2f0e2a9f3bd37b2c71dd99e57912d347036605d244682d1631aff42645c3579c378da6
SSDEEP 48:KIDI1Ks04jyL2xMwuUUNb4PgISINK9s1uNxmdYHY02yLdcRtfLPwbD2jISlwK9lN:KIDCKs0+WheKiwKaq0KziHy
TLSH
T17891404035BF021539BD2A8881B68B5F124236B73158E53B7FBD40A69E2FE085DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdb31f66-21a5-4ce4-8271-54ae39853b2e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bdb31f66-21a5-4ce4-8271-54ae39853b2e.tmp
Size 10KB
SHA256 ceb15fca66b58077924c64edc4307de041a832da35ad0c0e31c4fb81d9ae1098
MD5 0cecbebd718dcd8ad29a17651db389c4
SHA1 cdc325ac5376941dde940739164422e87f0df6e2
SHA512 da4923a8fbe1ddcefdda80b34cd24c063f952021587b51899217328182c6a0cc30e24a821e806f990c04c58aa2dc2fd8eb7f8686abc9c2e5aa475a5992a33afb
SSDEEP 192:sxZ0RrWb/fLsC7XIdpHwHW6+WNGYry2VIIg53J:sxZ0Ub/fLsC74QHbGjn
TLSH
T1B322C8526E38697B8CCBD20DBB25BF53E6F9503291901E44EBFD8A1C05E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0af04c7-3ec6-4a23-8a35-08d8daa6aee4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0af04c7-3ec6-4a23-8a35-08d8daa6aee4.tmp
Size 27KB
SHA256 72a56b9f6e46bb635434e0a40ea8e8a292f1691bc235822fbc5b3acded0c59fe
MD5 a3b8b9b1baaebccdb2af74a43fbd9fc0
SHA1 6ad14d502157f2f3cbb28cf2ed666d919850c49e
SHA512 a49a253fc921d0508a41fb1de385f12145d3c8260e9459fe25b3c0b04c3e81a7dcf54f78ba8a62b3dac3234d047bcf21e27d9f4d1a0d9a6f0fa1a94ac8c0c246
SSDEEP 768:+ny4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TblroREG:+ny4J/DWvbtBhu1jajiLm0beaG
TLSH
T1B5C20B3B684CCB7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80959185-4933-4ee1-8f9f-aa611dcfe22c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\80959185-4933-4ee1-8f9f-aa611dcfe22c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a5524650-8e4a-4ce8-b380-1d02aa4d828e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a5524650-8e4a-4ce8-b380-1d02aa4d828e.tmp
Size 18KB
SHA256 b3e532d41ef8c49ee74c6ade3563d941aff1f5733677277978e5255f4c42f9e6
MD5 7e26f3eb0d038d58ca70cab23c8aa34b
SHA1 773d35ecd1e6574353b9f539fabe1d2243f307b6
SHA512 23bc1b3fa835ca1c1ef6c4b345b1e63d299b251a8fdb974762fdcff2c31912e80007e3002991f1eb87b636cc7c7caa1759858edf6c17f185db1ebbcff82c5871
SSDEEP 384:yQkUSv0sNwnrCZActHX58EMOzAAXd2I9MtUnIIld:q0LCf5aHOZXd5EUnLj
TLSH
T16A827D32E8B96D378EF69250FA4A35039FB88117D6851F94C6CD7F2D01CE29C234B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1253831-c812-4d17-8af2-f20cbd032d79.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1253831-c812-4d17-8af2-f20cbd032d79.tmp
Size 8KB
SHA256 f695a2265c04234b8ad833ffd1980c5aba9f11d310aa1ab614218826d437536b
MD5 27f0c80d0fa36e01b6e2a3efc052cc71
SHA1 055c8c0b24e37fb8b98e902c9da28d4b72d0d2a1
SHA512 55f878a14a9bfc29722f3142038370d65da1624afe1fa9263eec58ea9c5f9b7efa6b10e9739534e7f20f995260333a934060fa4fd1accf4f03da3f73ae14d961
SSDEEP 192:1ONf6wlDgQmiUy9nW4X58gZMOKoAaDloqnU6:1ONf6kgyW4X58EMOzAqnU6
TLSH
T12102FA35B9787C7B8EF2AE09F58B27139FE4102BE5512F84DAEC1A2D00D769C1347822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6b48a5a-a691-47cb-a99a-4e1d025876a1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f6b48a5a-a691-47cb-a99a-4e1d025876a1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 274464add644c9964ea3d6b7b43238ec9d4dfbab5e99267dbaa5ccadda4f00fe
MD5 ee179d3cf92332238196160a57d6db34
SHA1 7359050d47d5c7e8e86d2e9a23efcfdb9d264fa7
SHA512 ece7aa76cbab5c9cdb7f92d0814eb0ba3195f2629f54b366bb6e1692b1b57a47c0b7d2313990991b5d64043c1f8d73adb3afbc66d6023f5fea78659505bfd081
TLSH
T1AE41E758A6EA1148B3B77F1AABF7A86E887B7C372F06D49D10010E4F0632A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download