9fafc9a540091a61b55d128a740b8225efd6ded9748444ca8253a07151465117

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 06:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 127KB
Sample261030-g5ralsdf77
SHA256 9fafc9a540091a61b55d128a740b8225efd6ded9748444ca8253a07151465117
MD5 a424aa12ec7878e990c2a23c636aaf2b
SHA1 b1409ff8a42ae393c8980ffae0bc468dd05f4d95
SHA512 6e0292faac3330b5db13501ff0dd2641f35539fff0d2d0acfac1a6fce2f905ea69fdfa1ce4ee8d18f3f057c28670bf848c8a4ac86fb0af39ad84d06a0d0bb814
SSDEEP 3072:MzyXjVO4fpHXGx+vPQPnJQPIBQPAimW3bQP3lQP5VQPiKQPaHQPhjkkZQPFgLLVz:xfpHoYvAimWGkiWzhjkkIFn2ZRD
TLSH
T1B6D32120916A746B0337F6C1B9A69B1970D7A12DCA231E00F7FC17AE5FDBC50EB1254A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4656	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{5E3DE45A-B310-44C5-B781-FD27D1645346}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5000	msedge.exe
5000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe
3404	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3404 wrote to memory of 1164	3404	msedge.exe	89
PID 3404 wrote to memory of 4848	3404	msedge.exe	90
PID 3404 wrote to memory of 4656	3404	msedge.exe	91
PID 3404 wrote to memory of 4848	3404	msedge.exe	90
PID 3404 wrote to memory of 4848	3404	msedge.exe	90
PID 3404 wrote to memory of 6068	3404	msedge.exe	92
PID 3404 wrote to memory of 6068	3404	msedge.exe	92
PID 3404 wrote to memory of 3832	3404	msedge.exe	94
PID 3404 wrote to memory of 3432	3404	msedge.exe	95
PID 3404 wrote to memory of 3832	3404	msedge.exe	94
PID 3404 wrote to memory of 3832	3404	msedge.exe	94
PID 3404 wrote to memory of 3432	3404	msedge.exe	95
PID 3404 wrote to memory of 3432	3404	msedge.exe	95
PID 3404 wrote to memory of 2240	3404	msedge.exe	96
PID 3404 wrote to memory of 4524	3404	msedge.exe	97
PID 3404 wrote to memory of 2240	3404	msedge.exe	96
PID 3404 wrote to memory of 2240	3404	msedge.exe	96
PID 3404 wrote to memory of 4524	3404	msedge.exe	97
PID 3404 wrote to memory of 4524	3404	msedge.exe	97
PID 3404 wrote to memory of 3540	3404	msedge.exe	99
PID 3404 wrote to memory of 3276	3404	msedge.exe	100
PID 3404 wrote to memory of 3540	3404	msedge.exe	99
PID 3404 wrote to memory of 3276	3404	msedge.exe	100
PID 3404 wrote to memory of 444	3404	msedge.exe	102
PID 3404 wrote to memory of 3528	3404	msedge.exe	106
PID 3404 wrote to memory of 6088	3404	msedge.exe	107
PID 3404 wrote to memory of 5512	3404	msedge.exe	108
PID 3404 wrote to memory of 4316	3404	msedge.exe	109
PID 3404 wrote to memory of 4316	3404	msedge.exe	109
PID 3404 wrote to memory of 5000	3404	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ff91553c188,0x7ff91553c194,0x7ff91553c1a0
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,16519088249964643613,12130607769425318005,262144 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,9893852396557696750,4155338992961063596,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,128562423802529878,17881692387120041776,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:13
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,6952748362379324781,9721316265127009197,2097152 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,16275627264034064603,17614457523619879054,2097152 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,5637508653081308440,9637449201640244498,2097152 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:9
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,34054665855159515,7292139377092485750,2097152 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,11829317671377350598,6472058619273787694,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,1657016982725963046,7663090689857561470,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,4009381112546136008,1702955997948930468,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,4009381112546136008,1702955997948930468,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,15569480444379670833,11813955283429316585,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,453320089088490959,14015998620629174799,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,10158026361106866911,10493848087526233934,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,16459309751956191629,10221954795006772335,524288 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5540,i,14354369723593791177,6116419509642330586,262144 --field-trial-handle=2260,i,6205449710786555848,12664180612404067148,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f03d49a-3136-45ee-abd7-8b4006d4d41b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f03d49a-3136-45ee-abd7-8b4006d4d41b.tmp
Size 38KB
SHA256 a1565c6cc2827c958a0c3f78f99464ebc512c22e427e0cfbb1aba3e16c975dc5
MD5 579f0d8c5f800e63b2ad3233d2ec435b
SHA1 090f09f4d55de35c69fa49726f222af8f151fb46
SHA512 fda7705dca78b1627051bf4a38f00423971595b7a11670d368206374c26ec935b6dc47d0c08c2c322906bafffb85110a5f92e68e045ac48b639ddc848b0fa5bc
SSDEEP 768:s/UxvxjgC+i3bhP9TOf9fffff7zOyJYe1ELsAvC8/YNuTSHrkw:ZZj3+i3ef9f3fDznYe1EQujYUS4w
TLSH
T1FF03BE32EC78CC375EF2A288764A5753EEF8811395C55AA486DD2F0D06C72AD630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62fb8d2d-7f33-4861-8715-ecda71b8f573.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62fb8d2d-7f33-4861-8715-ecda71b8f573.tmp
Size 36KB
SHA256 0a19ce1ab4d9ca155f528eb97e61957d32a735a2296c7812023bc1aac4448a58
MD5 d7d9c8b16350c6f844b783b1738ef398
SHA1 f4f9d1fa5766eef6a5d2d2ce25cff3252a674369
SHA512 5663dd10f6fa7a3f0444340492b098f18177653912df045dbec34ee1300cf8f72f111266381d34a764d06aece60bd8dddf70a805864600e58adeb2599b22fc5f
SSDEEP 768:uFd83awg1ht9TOf9fffff7zNGJYe1ELsAvC8/YEuT68UZZLk:O83Vf9f3fDzKYe1EQujYPDUZZg
TLSH
T191F28D32DCA4C97BAEA59B95B64A2713EFF48113C5D88B54D7CE2E0C01871ED134F866
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8eb8efda-0811-4a51-b931-7a8442c9bc4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8eb8efda-0811-4a51-b931-7a8442c9bc4e.tmp
Size 37KB
SHA256 dc733cbfbf1de7f39d280e1d4b5684b95f26255b3c294a92452aff2bede1bd46
MD5 618e06ef845866ab5aa539e16d970564
SHA1 1916e5aa581d63e4d3933ad741e4cb9158011dd5
SHA512 7a924b92b756865ed4d6cc25cc94dcf6b436bf9c7b521891749a3adeb3479839d20c567c40a2558d49d5547e80aabd6e3d11e0b61ddaee9c3723db2c6e6220a9
SSDEEP 768:h/UxvxjgC+i30D9TOf9ffcKJYe1ELsAvC8/YM0tSHrkw:0Zj3+i3Df9fBYe1EQujYvS4w
TLSH
T1E903BF36ECA48D775DF2A388774A5753EFF4812394C45AA886DD2B0D06C72AC930F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7724dec-f3e0-401f-95fb-d396cf77f116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\e7724dec-f3e0-401f-95fb-d396cf77f116.tmp
Size 105KB
SHA256 98d027a7d5f34317602446091fe5e8214f7e942ff9ef737ba4d84e1e3d5595bf
MD5 8f3342292c3866482651f7779a119225
SHA1 4913b3a3b3dbc7ed6a23f06a3e43a7fb771af8a5
SHA512 5ac909173ab373dd81244ae41107fd57459d8168297be5c68fdfbbe0e0d6bba188b269540254cf5084284313bf648a5ee3587eb3073c307b59f64cfeafed06a7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7J:fwUQC5VwBIiElEd2K57P7J
TLSH
T125B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

0f7c0e7d-5a2c-4177-92c1-c5accad10676.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f7c0e7d-5a2c-4177-92c1-c5accad10676.tmp
Size 11KB
SHA256 678138fc287ac5682e134a6e8f1da5bd3612e5ce7fad7f56982e697fea11e2c1
MD5 d741c636473dc1c8d08edac98f44e92f
SHA1 9e40d1202586cdc8a7300253b951038fc25f6780
SHA512 cd4c3677f2425ff7024edda79643f19044ed30c7dafedae22d3e62fe7a01eebacc3820c6399f28d54c6d0fa2147cef09a617eb4e5268b9b988f4c298e39b4d71
SSDEEP 192:sxRlR9bN/feusLlqrViWzoA8p4s/g6+WNIYxp3nUpGJIgDmJ:sxRlPN/fTsLleiL1/5IIU+2
TLSH
T17A42A615AD38A93B8CDBD219BB65BF13E6FD5036A1951E48B7FC8A1C00E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23b8d77e-2e3c-49a3-91d8-8fa54cf45f4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23b8d77e-2e3c-49a3-91d8-8fa54cf45f4b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

34d77845-4190-482f-a91f-0ffae7427ad0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34d77845-4190-482f-a91f-0ffae7427ad0.tmp
Size 11KB
SHA256 805de3f2a488d2c259dcf897bfd2b1e9b06259a7cc02ec57313a3789c061481e
MD5 aca5ceb3a52ec43d825740a2d2c0b274
SHA1 4107e4bb8669fc514473e410aebd9537d89cbd97
SHA512 45c7bc1aaabf1ca06f1fb54d837f6c3a250d35d2acdbb28066da4cb65bd465eb196a23425f25d962dde585af37579223e6e50b70483072bf25a6d3093fbe7267
SSDEEP 192:sxRuR9bN/feusWlqrViWzoA8p4s/g6+WNIYx6fnUpGJIgIJ:sxRuPN/fTsWleiL1/5IBU+s
TLSH
T1A332A5156E38A93B8CDBD21DBB65BF13D2FD1036A1951E48A6FC8A1C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51f9c469-d8b3-4794-bf75-1c0a9bf5ef8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51f9c469-d8b3-4794-bf75-1c0a9bf5ef8b.tmp
Size 23KB
SHA256 3cedaf003800e7ac541600108ec1c7bf90f43d2ac15774e51c0e8786208229e2
MD5 2aa4559c1855013e0ad19b6b4895bd4e
SHA1 85a171775902d60d16823e48cca1dd79a2a03aab
SHA512 f377fb4d7cb9d61a07018e3ffdd506c6f018991240c32a546ff620dc786a11b464b9cd86c1181f34984d4ffbca9081c92099fc824204d0933ef4c32dcb4f6847
SSDEEP 384:z/ZDnwZfCtgbRFfkWKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVnL9K6RMvrowpB:zBDnwFWgbjfkW8F1+UoAYDCx9Tuqh0V5
TLSH
T183B2C92B644DC77E8FC00AAD9C196E9B7D9802C796588D4047FE994C03C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

722a8a12-f7c7-4ede-90e9-f968cae4347f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\722a8a12-f7c7-4ede-90e9-f968cae4347f.tmp
Size 11KB
SHA256 6aa358e56faf87ed3ce90a1f3585a6b19e278a9e0d8f296d19635105c7546ad5
MD5 9d12d5d9ada059672f761bda8db379ab
SHA1 1a9445ab2e16a43f80bedc295cc68317d95c4262
SHA512 623ae8a8da351c8f147f2fc7007b34badf8f556395c087795ddf409475c70e4404b9841ba494d1372fe5a76891f67b3779e14b9eb7d391c15acead93104c9394
SSDEEP 192:sxRlR9bN/feusLlqrViWzoA8p4s/g6+WNIYx6fnUpGJIgD0J:sxRlPN/fTsLleiL1/5IBU+M
TLSH
T14E32A615AE38A93B8CDBD21DBB65BF13D2FD1036A1951E48A6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 587ac2d8aa817b523e59f765360be4f9fdd6888aa51f208f2b2a33fe723c41fc
MD5 61455b8cc98090f3208a67b2cc7208e5
SHA1 59fd9b47a5ce8335a80f2cae7ab21db058af4a1b
SHA512 6a266e39e87c8792703909d0c96efd5292c4b08e9b8a0731d1a48789dc88a4c4ec850f04ebb3fb1f35aad18211c67335ae8bcb75c74f41332b37eeeb8d170299
TLSH
T1936150C673B40054F7544175B2D2CC8736F8054E978F9F921998EAB8DE75F2B418F162
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9cb5eb161ccd23888e18d1591df5f6c14195e04261f455f1d0a042d47bd96b9e
MD5 ed662a0d113fc307b76889f6dc2f13b6
SHA1 0528ef0d3bd64fb8c76dd94c8229906a20945fbe
SHA512 8e529888c08dbdb821fc474e22593cfecb04594c01940ca47d5b038c7fb782dfb621ff5c5b4783e32f5fb38ec9dc2ccf883cf4ebff578e530a24b891994a5228
TLSH
T14A6150C673B40054F75441B5B2D2CC8736F8054E978F9F921998EAB8DE75F2B418F162
MD5 SHA1 SHA512 TLSH

Submit Download

6e5cc9f7-52c5-4884-b4f9-ce7923799206.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6e5cc9f7-52c5-4884-b4f9-ce7923799206.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0473bb-4a04-463d-be8c-165416260a2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3d0473bb-4a04-463d-be8c-165416260a2c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d8660173-0198-41c0-8de6-3b3b403e8edc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d8660173-0198-41c0-8de6-3b3b403e8edc.tmp
Size 1KB
SHA256 57721ab9d91a85da3994f11a9907184ea82e5fe268da263f9de00781247dfa77
MD5 ee05b49962cc765d7327ef6b4c54a2b5
SHA1 8342c7de36a9486246b8facc4cea517759650142
SHA512 3000e57d701244916a682f0adf37707e4a25d258cf863a61d663c5d44c071732476bc01b5954db51aabc039520448e29d20f587b87855b2b27f650fc81b4c504
TLSH
T1B7319DF743B4966E9A0196F0EA18AE2FCE1C0516431C7865C9E0AE2793F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

fc1105cf-3e4f-427d-8e4a-8ee3598b7293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fc1105cf-3e4f-427d-8e4a-8ee3598b7293.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7eeec24c0e41fc1ce563e7ea3033a1fc631e8acf7b36ae0ffb45760c8c54babf
MD5 600e0647fba7e9cbe6b05083feb63665
SHA1 b389f23ca6d282303b3fe4d96d5df94374122fae
SHA512 1abbca1266495db6b0efa149e89127da39678b002c11912086bacea747d70317901d80ede15edb9091572376373ddb59e529bc1f408d5477ca9ac036af6e4ec5
SSDEEP 24:Ks79JiKZJ2EKI1KAhg1GS9SNyX5mpmwEIlKihk1GSjQY81KAwIRKehA16SPQlyXs:KDdI1K2gA/y9zIlK0k4szIRKIAEzyc
TLSH
T15891603032275354387D3A0C85E4A75B465131A33429E66F3BEA41E68EBBE049EBD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

3fdcb8fd-d346-4912-9d59-c6beee0da827.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3fdcb8fd-d346-4912-9d59-c6beee0da827.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c632fbd9-0f92-4865-a859-8a6b0b825bca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c632fbd9-0f92-4865-a859-8a6b0b825bca.tmp
Size 33KB
SHA256 e35366ba1fbec9b821c0bee88453e70648379ea8f2acc425ea9b2385c50c997a
MD5 7ffd7f63fcf5329b43c9d06d39e89247
SHA1 0eac48b8f984b3c3e1ae8c21d342bff160e63314
SHA512 f1431fb60d4d1541fb9244dfc4d120bcf5f46b2b560a45228d6979f5f72bd3ddd8c1a3edc418aa462e3d3c80410512b1b7799d8526ba4939ae1b5fbb2e72c0c8
SSDEEP 768:Lp36ht9TOf9fffff7z0yJYe1ELsAvC8/YEuT68UZZLk:Lp3Ff9f3fDzFYe1EQujYPDUZZg
TLSH
T18EF29D32ECB58D775EE19694B64A2B13FFB48103D5C84B54D6CE2B0C05C72AE634F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43fc64b8-7e9d-4cd1-90b9-c7973cfea7f6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43fc64b8-7e9d-4cd1-90b9-c7973cfea7f6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f854915a-bf9e-4872-896e-7ed5fa358295.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f854915a-bf9e-4872-896e-7ed5fa358295.tmp
Size 33KB
SHA256 89c9804e2d0512d5149837d56262b995c7b516d694036716c0cc336466fc5f29
MD5 f8ec8a555595a983b89b2f1c75462ea0
SHA1 456ba956da483a564caf1f6a4e4f5b05dc6aeaab
SHA512 7db595e79473fd881a567be53e50988e1e26a5e4208d70e433e64f2c353b85d971b6fffb28d4aab044a02230374fac8c48e1c84b606b4c3ac7dbeaaccd831a82
SSDEEP 768:dp34ht9TOf9fffff7z0yJYe1ELsAvC8/YEuT68UZZLk:dp3Xf9f3fDzFYe1EQujYPDUZZg
TLSH
T1DDF29D32ECB58D775DE19694B64A2B13FFB48113D5C84B54D6CE2B0C05C72AE634F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download