8fb53f7f40e6b513881a4a2f73aaef4f79f416297c3a046aa0c0ddc7f2d47ee9

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 06:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 71KB
Sample261030-g5ralsdf82
SHA256 8fb53f7f40e6b513881a4a2f73aaef4f79f416297c3a046aa0c0ddc7f2d47ee9
MD5 b79deb054013a5c8d10942e26118b014
SHA1 b87ebf8ae8122cb578229d88efa31c0729ce8c73
SHA512 80eb792bf64ae82040b33cb6324e5dce2148b11d208dcc6017e112cb439e7c532784bae80bd7ef99f35cef4a94f461af2d634cdecd5a2e20cf615965f5c110f2
SSDEEP 1536:WhgEufFq4Rss3+Ova5qtkKSsOLCZvjA9IBJlthrsClZzO+B/6/Zz5YWeqqSTdAcB:WhgEufFq4Rss3+Ova5qtkKSsOLCZvjAX
TLSH
T12263756092C5647F8227A3C6B970BB2D74D3606DCF171E02BAFC1B571BD5D04AA2B18E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{8370EAF8-A4B0-429A-80C8-E316A784C2D0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 1528	5012	msedge.exe	84
PID 5012 wrote to memory of 4900	5012	msedge.exe	85
PID 5012 wrote to memory of 5112	5012	msedge.exe	86
PID 5012 wrote to memory of 5112	5012	msedge.exe	86
PID 5012 wrote to memory of 5112	5012	msedge.exe	86
PID 5012 wrote to memory of 2516	5012	msedge.exe	87
PID 5012 wrote to memory of 2516	5012	msedge.exe	87
PID 5012 wrote to memory of 2788	5012	msedge.exe	89
PID 5012 wrote to memory of 2204	5012	msedge.exe	90
PID 5012 wrote to memory of 2788	5012	msedge.exe	89
PID 5012 wrote to memory of 2788	5012	msedge.exe	89
PID 5012 wrote to memory of 2204	5012	msedge.exe	90
PID 5012 wrote to memory of 2204	5012	msedge.exe	90
PID 5012 wrote to memory of 3128	5012	msedge.exe	91
PID 5012 wrote to memory of 3128	5012	msedge.exe	91
PID 5012 wrote to memory of 3620	5012	msedge.exe	92
PID 5012 wrote to memory of 3128	5012	msedge.exe	91
PID 5012 wrote to memory of 3620	5012	msedge.exe	92
PID 5012 wrote to memory of 3620	5012	msedge.exe	92
PID 5012 wrote to memory of 644	5012	msedge.exe	98
PID 5012 wrote to memory of 644	5012	msedge.exe	98
PID 5012 wrote to memory of 3756	5012	msedge.exe	99
PID 5012 wrote to memory of 3756	5012	msedge.exe	99
PID 5012 wrote to memory of 3720	5012	msedge.exe	101
PID 5012 wrote to memory of 4712	5012	msedge.exe	108
PID 5012 wrote to memory of 4732	5012	msedge.exe	109
PID 5012 wrote to memory of 4252	5012	msedge.exe	110
PID 5012 wrote to memory of 3160	5012	msedge.exe	112
PID 5012 wrote to memory of 3160	5012	msedge.exe	112
PID 5012 wrote to memory of 4884	5012	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe87bfc188,0x7ffe87bfc194,0x7ffe87bfc1a0
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,4473940017151568484,18096153239198019663,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14735667203635797838,12878425766601621832,262144 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,9641274006807967228,2728277182994171895,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,783351362792110996,8715765140872018113,2097152 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10238324370165175255,6103035954399432324,2097152 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,6764130580490074078,13379886986505426060,2097152 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,7258232299449441453,15401071196737864876,2097152 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,12395434479714356669,767539935853094686,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,11101394971601555970,6779102919463444270,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,12708509182689173710,12423010244274327751,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,12708509182689173710,12423010244274327751,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,14301286894197732563,3889748147830468690,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,16084009346386363168,3472491525507614062,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,2780311286109524138,10440061036058527850,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,15202927286320251592,5247994575990524740,524288 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6324,i,17463953993808318675,14524867656260013644,262144 --field-trial-handle=2348,i,964703628344503095,12483376745478878549,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

01579788-66bf-427e-ad2a-36ef96977930.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01579788-66bf-427e-ad2a-36ef96977930.tmp
Size 18KB
SHA256 2e8613ceccf2876ebf6aaf08dbf4387c92a28de32cd244f632e60f37c8bdc78f
MD5 86f6dfef0fe80c38a87ef083363f9d80
SHA1 ccd11ab124eec2d841d4babd0c0b96b6fc1c07e5
SHA512 8126aebcda5e68a0e5c7056674cfb4e97a451a8605b1df5f1a93ea99a70e96c82f8ef5bc16e2e232a5ebb8517e8a7348528fcd5f3abb30140214a9f8a0e458ee
SSDEEP 384:IQkUSv0sNoUoTZa2p5u8irABZar2IpufIIlc:A0ikkrAar5pufL6
TLSH
T117827C366CA86C3B9DA7D921F50B3603DE648167D7D85F84DACE7B2D01DA1D8130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

202dc352-fce9-40a5-b77d-5ac99777245f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\202dc352-fce9-40a5-b77d-5ac99777245f.tmp
Size 18KB
SHA256 7d6b5c9491d5b100069de067d4abfd2f1e3086ce0796be66a1d14d4069dad1da
MD5 029547b8feb9b2634e56bcc268b3c6e4
SHA1 b765b01bb155594f2e960adf242dc103cd27a577
SHA512 70875ee93a3df953ab01ac1d27879c6b774cb5d43eeb77b66a9444798c6ff839e4825ba3fdc90d838684b7beb6e4cb296ff5af336a396dd9929d037fa1dbfaaa
SSDEEP 384:eQkUSv0sNoUhTZa2p5u8irABZar2IpufIIlc:O0JkkrAar5pufL6
TLSH
T16A827C366CB86C3B9DA79921F50B3603DE648167D7D85F84DACE7B2D01DA1D8130BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a59e169-aafb-4180-a243-8aafaa4dc8e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4a59e169-aafb-4180-a243-8aafaa4dc8e7.tmp
Size 21KB
SHA256 58068f4084152582eec917128ef611da7b9b82cef3a433ea319648678ee36568
MD5 171334ed77596a668595d5a97b957995
SHA1 0f0ef914abd7bac723891b9dca0c019c4c8b7797
SHA512 e046396d2ddc7575f357d40a223ea9717f3555b2535457c01b5cb9ae39d48fabe9486f36e7116a69c06ab5b04eb17db9450197b7d5a94a7932c000ef04b5dc7f
SSDEEP 384:OiFzQkUSvyzsNp8TUNTUlIloTZa2p5u8irABZHr2IpufIIlc:lFdaEwgtkkrAHr5pufL6
TLSH
T10FA25B335CA89D3BAEB69E51F60A3603DEB44167C6D49B90E7CD6A1D01DB1DC130BE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73e6e292-730e-4181-8a8b-844ae85c3d30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\73e6e292-730e-4181-8a8b-844ae85c3d30.tmp
Size 8KB
SHA256 b7a81f682674315a017652288ff8b01c46f32c56409fdfcb98d4ba771f69984a
MD5 3d4aee74d460c36ee65bc3e2dfad8900
SHA1 49576900eee0416191838d2d6bd9107a06ca80b6
SHA512 ea6e0aa22bf6ebb8db347025e844914114825d123c9e85f98b8662439b79f5446cb0e564f8c44f9edf79e9826361c8c0743b0d22bfbf8e1064c8e025d1af90a8
SSDEEP 192:+ONC6iDzQmiUyFziq5u88PwuhmBUohzuZjq8U6:+ONC6A6iq5u8irABZurU6
TLSH
T1BB122B3568686C3B6DE3E861F44736139E64427BEB886F80D9DD272C01EF59C5307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

26677e44-240f-4bfb-bd5b-ce48a56a6535.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26677e44-240f-4bfb-bd5b-ce48a56a6535.tmp
Size 10KB
SHA256 118d18c9d11a32d1b60c84a10812f7fefbd22d8aa6c4513c2ac235643c643255
MD5 b1d540b9f588e47350982f637c58d79e
SHA1 941ddae27d97ef339f3f67c4ca4d35187e0f40fd
SHA512 13c2617cd22a619c9dd649995489004d70de7eabcf7f33799e4de83019bb0fbc2c51aaec630fe31f128422f517307199dde8f1b1c8379c7b29c3278609a70e35
SSDEEP 192:sxZK/R+Wf/fpshDiIdpdnHW6+WNGYaXM6b+NIg5RJ:sxZWnf/fpshDLVHbGFGl
TLSH
T16622B8516E38697B8CCBE20DBB257F53E6F9503291911E48A7FD8A1C05E6BCE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

529b040e-8733-44dd-89b7-571f62343ed9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\529b040e-8733-44dd-89b7-571f62343ed9.tmp
Size 10KB
SHA256 eab498cacce0e7bc17cc950ebf6285987b9c11b1c185dfa202bf9b24306fb129
MD5 28937bafaff1d3d266a5ffce9e44801a
SHA1 95f36f7d56990cff2b48ab6e27ca5fa5d57ef18b
SHA512 423aa229c6544482af05ef775df2c8fd5ca4a6e22aa755c9434a451d50ddd2d1076337825114d94135184a2f378cb4451055f45d94734408e023f1b722259696
SSDEEP 192:sxZK/R+Wf/fpshDiIdpHnHW6+WNGYaWMhm+NIg5RJ:sxZWnf/fpshDLHHbGKGl
TLSH
T1A422B8516E38697B8CCBD20DBB257F53E6F9503291911E48A7FD8A1C05E6BDE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c7085b2-4953-4e3d-bb3a-113095c0c9a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c7085b2-4953-4e3d-bb3a-113095c0c9a2.tmp
Size 27KB
SHA256 8b97557b2b9887fff1b3e80aee924e0e5139b08556ccc58247cc1ab8983540f4
MD5 92982c09507afbed6d21d9f175919718
SHA1 1ecc231a2dc397f8ab0d5055d86b1bca1716afcd
SHA512 9d2fae7346b5e866382bcb006430320c128e5fd8095151255cab299b749bf136816f76bc52a86300e146b4d182b96a25553d52cd5a59fce36ed073455978c4c5
SSDEEP 768:lOyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3Sro2Zwx:lOyQRbrWvvlpZu1jaXKLf33J2Zwx
TLSH
T15AC2FA2B640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FB984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d2244d2-c158-4803-bd44-d22091ffc21a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9d2244d2-c158-4803-bd44-d22091ffc21a.tmp
Size 9KB
SHA256 a3701fd5c8268dd65c4f3b76ab35add46821e4c29e80882d5bac65be1436e203
MD5 fc829ffef29bef4994b8fd15f5c2eb47
SHA1 0b8d8632c111e20f106ebf200e8a132fc97ab76b
SHA512 18a63a41b9923d715e19d80fe01a1e4baabba1cd6a0060d750a91aa7c1d2a450b845f01954ccf6c3c001df7a14de416a3a5314b6c0481b4d0cb55d1046bc36e3
SSDEEP 192:sxZK/R+Wf/fps4DiIdpdnHW6+WNGYaJMeb+NIgrJ:sxZWnf/fps4DLVHbGBG9
TLSH
T15322A7516E38A57B8CCBD20DBB25BF53E6F9503291951E48AAFD8A1C04E66DE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e280dc5-519e-4b31-9cbf-080a3146ccd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e280dc5-519e-4b31-9cbf-080a3146ccd9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1876d82b5083ae325903af4e072c4c1daefc22cbc3bacf64af4264c413c7a140
MD5 b3ee3ef17ab29a852be7cc704eabf071
SHA1 6be02386ebea33e2a0bc934969a048df9683b8d4
SHA512 df6cdbb22b92866633ae19883b1debe3895991edec0e3ea070695942df8b7d2538d3057cfc08fb16b2073b039fec0ff0ad6be88f07893928da9f070e9ccf63a7
TLSH
T1486151F16FA0A8D0F7F86B31A9D6048739F57981E5531D0FE064D4BD190A3B8191437E
MD5 SHA1 SHA512 TLSH

Submit Download

ce754a8d-25b8-452d-8979-6e082b2e07c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ce754a8d-25b8-452d-8979-6e082b2e07c6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2b0894c9-b0a8-469b-891f-77e0cd0c7df1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2b0894c9-b0a8-469b-891f-77e0cd0c7df1.tmp
Size 1KB
SHA256 081e680103c333e89494c02983529b38accd9e55fd2b8c5998c9f21ca4ca4332
MD5 f21900dedef1ec861988c2f42787fee2
SHA1 30660d6397456b315c601b2f66260d253981b150
SHA512 16f220a2f839a0d5ed5cbb5372790511231e4763a9f312f32d48ccec55492a39b7dcf11834c87cabe5051f40de41448e3597f9918af919fb837146a8a6396a4a
TLSH
T167219EF383E1866E8D0156F0AA18AE1BCE2D0516422C3C25C9E4AF2793F3471D00265F
MD5 SHA1 SHA512 TLSH

Submit Download

527a421e-ef87-4ccb-8334-d7c594bd067b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\527a421e-ef87-4ccb-8334-d7c594bd067b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e35f0062-8a45-4b6d-a4ab-d744835fc8bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e35f0062-8a45-4b6d-a4ab-d744835fc8bd.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ad585a296c524e3a7b6ffad42461259696e0eb21e678588522c17d2ffc6fe2a5
MD5 4f2145362b29b7d2bb3731de5d42b0ef
SHA1 c3c3cb91ec1cbb61d6ab359dae250c816d8b2a62
SHA512 e9a03e15df46941b1d20e2aa56136d5c90d7fbd722be15bdfb59875b5fe8228e20fe73be7befe747c326234ee38bbeeefe83b6cef352d36eeea429e3b729edaa
SSDEEP 48:K03pYl5jn7UbHCfISRUK9R17Ux5EYCDZJyLAPGKQ6uvbG9mISivK9+1Evx4/YF2M:KU2wKrCee/yK8YrhKK6w6fBGKKI8
TLSH
T100B15300316B625038BE694C41F5965B514635B3B218F92B7FB852D68A6FE049CFF8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1293b8d-fa4d-45e7-83d5-e022d6160342.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1293b8d-fa4d-45e7-83d5-e022d6160342.tmp
Size 10KB
SHA256 64e9cbb12cb17ddc2f7472bc4bf53e67b535dbff565f234f01712e7a084e51b0
MD5 3f3a20f244df410553ceedb7b60c8175
SHA1 310373b9dab35718144a72afd8cdb9a498296c0e
SHA512 86839df8bc0f736ee98b6feb578fa54020eb7bbc8466c9b68d909824db08b7743ced42684b139c3fc56f853d1a89d7ecba2b763b7305384294f6d89bf6b8b419
SSDEEP 192:sxZK/R+Wf/fpsYDiIdpdnHW6+WNGYaJMeb+NIg5DJ:sxZWnf/fpsYDLVHbGBGz
TLSH
T19C22B7516E38A57B8CCBD20DBB25BF53E6F9503291D11E48A6FD8A1C05E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c8e99b6-b280-4177-9b61-5e5dd512b507.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9c8e99b6-b280-4177-9b61-5e5dd512b507.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e09c64cb-5a5b-4ac6-81e1-311cb52726ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e09c64cb-5a5b-4ac6-81e1-311cb52726ad.tmp
Size 8KB
SHA256 38f93d34956d70a2fd11fc143b027adba65f745f76b8fddbaba01b34a70ce73e
MD5 d265b3b4494d39032ee82220e50ec879
SHA1 27289179b6e52e9f312f623eb99047a69a221637
SHA512 e9a3aa15841d4108f9c5c44be4251bdc1959a9fa9f3b0b2cbcc191c1bcecb528ce704b34f8842b871ffb384e43d25b29354cd965efe003889da9f79358060b48
SSDEEP 192:SONz6iDCQmiUypzHq5u88PwuhmwSqzYfHU6:SONz6/cHq5u8irA4iU6
TLSH
T1F302E8386C287C7B9DF3AD15B5877B139FA4117BE6941F84DAE81A2C41E769C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75897625-bd36-46f7-856f-2698b1b14e44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\75897625-bd36-46f7-856f-2698b1b14e44.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9bd0a523e84818f1e954f75454764af9fdb1e59bf9949d4d09eafe671ffc3c09
MD5 636c1bff81c2bdffb8ae5fcdf5306447
SHA1 45e1529c091a0cdd405ecd568c60bb590d3262cd
SHA512 c6630246066b2d2d12f1d584b08babd994be06b868b52a0536edda7c915c0bba04d0c81527d9fe247b25f16ec6f358888774341ce324d59104c1316f2e00512b
TLSH
T1D841295CB6EA0048B3B37E569BF7A46E487A79772F0AD45E10010E4F0A63B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download