dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261030-pj56mscs2v
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5544	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{4F035775-9C46-47D5-9415-FCC85522D033}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1252	msedge.exe
1252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe
1248	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1248 wrote to memory of 5956	1248	msedge.exe	88
PID 1248 wrote to memory of 2748	1248	msedge.exe	90
PID 1248 wrote to memory of 5544	1248	msedge.exe	91
PID 1248 wrote to memory of 2748	1248	msedge.exe	90
PID 1248 wrote to memory of 2748	1248	msedge.exe	90
PID 1248 wrote to memory of 1512	1248	msedge.exe	92
PID 1248 wrote to memory of 1512	1248	msedge.exe	92
PID 1248 wrote to memory of 1464	1248	msedge.exe	94
PID 1248 wrote to memory of 1464	1248	msedge.exe	94
PID 1248 wrote to memory of 1464	1248	msedge.exe	94
PID 1248 wrote to memory of 1568	1248	msedge.exe	95
PID 1248 wrote to memory of 1568	1248	msedge.exe	95
PID 1248 wrote to memory of 1568	1248	msedge.exe	95
PID 1248 wrote to memory of 5280	1248	msedge.exe	96
PID 1248 wrote to memory of 588	1248	msedge.exe	97
PID 1248 wrote to memory of 5280	1248	msedge.exe	96
PID 1248 wrote to memory of 5280	1248	msedge.exe	96
PID 1248 wrote to memory of 588	1248	msedge.exe	97
PID 1248 wrote to memory of 588	1248	msedge.exe	97
PID 1248 wrote to memory of 2544	1248	msedge.exe	99
PID 1248 wrote to memory of 5184	1248	msedge.exe	100
PID 1248 wrote to memory of 2544	1248	msedge.exe	99
PID 1248 wrote to memory of 5184	1248	msedge.exe	100
PID 1248 wrote to memory of 1468	1248	msedge.exe	102
PID 1248 wrote to memory of 5044	1248	msedge.exe	106
PID 1248 wrote to memory of 5468	1248	msedge.exe	107
PID 1248 wrote to memory of 4688	1248	msedge.exe	108
PID 1248 wrote to memory of 5784	1248	msedge.exe	109
PID 1248 wrote to memory of 5784	1248	msedge.exe	109
PID 1248 wrote to memory of 2928	1248	msedge.exe	111
PID 1248 wrote to memory of 2928	1248	msedge.exe	111
PID 1248 wrote to memory of 1252	1248	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b0,0x7fff8f57c188,0x7fff8f57c194,0x7fff8f57c1a0
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,13261785647807584195,10601273645198451795,262144 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,7086372883062613834,9812032544376202278,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,17275796499949052525,2638133954269367775,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:13
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,14973429406058244856,9322434749472811239,2097152 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,11985286892779520360,3633980044178058475,2097152 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,12455409071555360003,10554557251842150405,2097152 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,10328883382002748686,11147986523091900687,2097152 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:9
  2⤵
  PID:588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,13823206121889161976,3721559593514712701,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,16172029912707811015,4169350201175383705,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,13260992548877716310,17832880932986086451,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,13260992548877716310,17832880932986086451,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,6686419648989676151,13730201680309696544,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15701626979754719049,6242138968254923183,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,6139695610632506026,17065543135924331561,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,13603436085219150574,11596303026189724044,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:14
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,2071646744056396307,2999660856389770038,524288 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6472,i,8746698270499089458,3200065776131448682,262144 --field-trial-handle=2252,i,4919601193303207049,9178296105802249120,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

55296ff4-47e0-494d-9b6b-0ff2f9439025.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55296ff4-47e0-494d-9b6b-0ff2f9439025.tmp
Size 36KB
SHA256 cf33cc2c2eece8bb6f1634a4bc21806e649805b0c712a682e91cab7fa5e7dd12
MD5 951cc0e4f7d246bca25db6b1e024fa74
SHA1 4fecd73ec9fe3229058411728020b6aa325057da
SHA512 95a747a093e0aa8d589716cd35fc75703cff084fddfee45ba63ecc97cb2cd10b60a916cc603189d6246ab34f0d9647cf8fa4c8e75e5da90562977a3085680846
SSDEEP 768:TFdP3owgVruc7fZrKUkt51ttRp5XSwQs88uBkiT2R61uwLs:zP3wJtrvo9/ILNBoi5Q
TLSH
T11EF2BE3AACD48877FDB68B85BA4A33039FF05247C4D45B94DACE691D028729D234BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

557386ee-01d9-4da0-87f5-6417ae184609.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\557386ee-01d9-4da0-87f5-6417ae184609.tmp
Size 38KB
SHA256 0c03d5c2cc371fe72210974d40ce94415a6bd8b1e4b2de057beb3400814f283b
MD5 bb953eecb3565266463330c5f6ea2167
SHA1 d892c7f02af6b1ff9d0d2ff9f254b4c17f383241
SHA512 793cc4c72998d91157afdec1252d62af704c29fb18bfff20196793873025c835d5fdbc063605b7bd74f963d084386420237350e27f56cf96e9dc9adeb4b1a242
SSDEEP 768:T/UxvxjgC+W3UGYc7fZrKUkt51tMp5XSwQs88uBkiTzR/P84g:mZj3+W3UWtrvoiILNBPHg
TLSH
T10103C03AE8D45873BCB29385365B234BAFF06153C0C51BA44DEE7A1E028B75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

090974b7-401e-4266-a4c8-569417daaac4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\090974b7-401e-4266-a4c8-569417daaac4.tmp
Size 11KB
SHA256 0f285acac14dd4c566cf37479663de8f17301a5a913029b198cedd2f4b842f6c
MD5 17d59ed8ccfcb227eab0ca791cd241e2
SHA1 85da069db2f5d22e3deeda6f53d47312f7fb1fe8
SHA512 0edc5f930f1081cf87c45678528a779bc8ffe92c382becaf8e37a8dd5772b184cbf19efb7dc324f6972449353501d02b50e29ca2607c842f8a753fb6f8bb7c1d
SSDEEP 192:sxRVR5b7/f9s0HRW3zoA8p4b/g6+WNIYEGp24GwIgIJ:sxRV/7/f9s03C/5I4js
TLSH
T14E32A715AA28A93B9CCBE21DBB657F53D6FD5032A0901F58B6FC8A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5efa64d4-8251-42fa-9d7e-79b45071d744.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5efa64d4-8251-42fa-9d7e-79b45071d744.tmp
Size 11KB
SHA256 02e55461bbbe510abc93e22313fbf73a78306fa90a568d68578d90d511496ee8
MD5 6a5af27d87e8c285e4705365615d7bb3
SHA1 0ae4d93dbb8c300daf757b0936d4a9e24b31a237
SHA512 356644e2187ae1dca9e4196425444eb0fd89c4581a2e9dbd442b602a7ffef250e9f6d77dea13824cf962b895abc92b256a1b90d6f7cb5f5913de4b05134f6022
SSDEEP 192:sxRuR5b7/f9sLHRW3zoA8p4b/g6+WNIYEAp64GwIgD1J:sxRu/7/f9sL3C/5I6HD
TLSH
T1CA32B719AA28A93B9CDBE21DBB557F53D6FD5032A0911F48B6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

894e0827-9a37-45ae-85fa-5c34264f78c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\894e0827-9a37-45ae-85fa-5c34264f78c1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 ba72eeafff536132d278cc4bd75b1cf505a63138985c8711830b374bab36cfe2
MD5 d9fd79cc9058c4f5b3f82e8a4066b737
SHA1 1e23c5aa30451ffe58f05964e24e51772bcae5ae
SHA512 b1c29ceae3f377814bcb053f46666d35df4737f6b36076ec64336a4233de51d5759e8610ddb8f920664a9c79afb506e016d5f202bb56f6888269fc214572429d
TLSH
T140E0DFC5C9C8C32EB20CA44B427D6B0C8A81A65FD2C0699E3708CD84B006048AB826D9
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 daa672f14b22131b66969673114222909785b12c9a409e5e7bb2366aea1e9dab
MD5 7cc1e1eb0cbf76d568fed1fd370a32f6
SHA1 f4aa0280b1b24428f513d7ec7b4c0efdd1148401
SHA512 32bbc60ab753f6d60294cbfc402f6a095da4618627a913a3c772f143689e39e643e2953ade128eb822e5a446d05fcec42c9668734af6dd7d0015838dc88b374e
TLSH
T1B94186837A5048E5EB7856388BE121CF363468BF39034F034C64D37E47D6788D15016E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9691ef5ae3e33833374c3bb6e8152404d4a5f992a6a87985a291c8f09db72d6d
MD5 395b58c22f640790d212eb635a75d3e2
SHA1 6c98af074cac08b1b19142960add71da18187025
SHA512 e3627068a38c78fb839013e5a59a78c10bd9ae36950206bad5d0eac2765f25b36253f86e803c29e1be43f69a22cee7259254dd48839fb051df4732cf443edb66
TLSH
T1444196837A9158E5EB7856388BE121CF3634A8BF39038F034C64D3BE4BD6788D15016E
MD5 SHA1 SHA512 TLSH

Submit Download

8f9c3dc2-2999-4147-bb30-03b3bc98223e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8f9c3dc2-2999-4147-bb30-03b3bc98223e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1d1d23d2-c4c8-4935-8dc9-f0c46ec37390.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d1d23d2-c4c8-4935-8dc9-f0c46ec37390.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

9669fdb4-55ec-43a0-adf5-904498b9a703.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9669fdb4-55ec-43a0-adf5-904498b9a703.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b11dce78-519b-4d52-9cdc-df0149f01833.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b11dce78-519b-4d52-9cdc-df0149f01833.tmp
Size 1KB
SHA256 4506f58c3c80c8f7105ecc0f23ef60c2794db42c6dc40059c7b29e4a09568408
MD5 28947340291c5a81ec041c3b14bb108e
SHA1 9463a2e8685a65a2ae06b35a5f8514f67133c06e
SHA512 ef333a3de4cfbf55337fef31cb8a720fa64a92b7e977ac73f1355b7d7411a35b47c8a40102aaa1783591081556480fd8404c2a442c7920565b45844becc3e95d
TLSH
T19241E3F783B5967E9A0186F0EA04AE1FDE2D0515432C7C6689E0AE2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 d379d4aad793dfdf81c93acfda754b10097cfab82eaf93bf2360b9dd6a23729f
MD5 fc1d1cb7c35a79573d307b82500e0803
SHA1 9621241e8de6b5ac7d10fc1f8e9304409958ee08
SHA512 cd28a028dc837c3fcc07e3b05c7e2d4c7ca47b2294a9f687943796ec84526a42744dfea3cd7c1f6a933d58679a3d2faf3e51b22bf0f5cee1c2fc5142d68a40cf
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXkroJe5:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VR
TLSH
T172B2C92B640CCB7E4FC04A9EAC196FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 845da9d93063e1db1270b6462ac667b61028d300ae23c28a169340faa0dd98de
MD5 926c67b23235317619e6d9b4f15f263a
SHA1 ae7bf2a21b82ea2848e78c0ba0333d3956e06bdd
SHA512 c70e8d35c752ad0a7e92e272c984b27bfedd6e0e3859acc911e1983a13dc7bf4920613e5ff5f59fbd1489ac6172c5b73932fa8d9f8e6b5e99144449c351e5d87
SSDEEP 24:KoI++R97ioL721Lm39I6t2KzVh73215FmSv8RFBNnyXheR20UIpKqhA1aSzwpyXS:KMSI/KHqsvydrIpKcAk3yh8IjKRqMbym
TLSH
T1099130D1B47B028039BD260942B4862A464A31B3305CE5BF7FBD51E58E6BE045DFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ec7feb96-1a5d-4b6c-bf9f-e9e2ac68e3b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec7feb96-1a5d-4b6c-bf9f-e9e2ac68e3b7.tmp
Size 11KB
SHA256 18e2e198fa0e2d4060ee8f5324bd1ff175f6436684c24f8757158c1c4486f978
MD5 4a3a96c26b2c980cdd97a3f90c6a7ba6
SHA1 27be850990e7977cfebfc1027fbab315c4c1b171
SHA512 c40f372af37c1e9eb6b324e60aee46da12104dc4d026dbc2e4afc152ccfd0a85ce0e6587650fb8d072ff67d8afdfab2d9d318d17d3faec3dff14862daaca97d5
SSDEEP 192:sxRuR5b7/f9sJHRW3zoA8p4b/g6+WNIYEGp24GwIgDzJ:sxRu/7/f9sJ3C/5I4jp
TLSH
T1DF32A619AA28A93B9CCBE21DBB557F53D6FD5032A1901F58B6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9aaab70-ab26-4b52-a431-ad112e26ab15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c9aaab70-ab26-4b52-a431-ad112e26ab15.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a384f3ca-0c5a-4d11-a6c5-0c1f7a65e863.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a384f3ca-0c5a-4d11-a6c5-0c1f7a65e863.tmp
Size 37KB
SHA256 877dec6c17bbf638176ba6c38d9994d57b9a17c18df9c54472b081697ee3111d
MD5 da5c048c052246fffb22b65534a8d40b
SHA1 5e86a0ae7d3357b45477da7546a11e4dd6135589
SHA512 22228edaa92e29fbd868ea6a93ed69d594d99552878411f3be13d5082d793e8adc4ac010a9d9a16b18a4a860ab7e8e557a21a5c07e0d4e90b27e7caee4ec9206
SSDEEP 768:R/UxvxjgC+W3dlZc7fZrKUktqp5XSwQs88uBkiTCh/P84g:kZj3+W3dMtrvjILNBcHg
TLSH
T16003C039E8D45873ACF39385365A274BAFF05153C0C41BA849EE7A1E028B75D6707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2a7e43a-f432-473a-8083-a1ec33d41d06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2a7e43a-f432-473a-8083-a1ec33d41d06.tmp
Size 33KB
SHA256 eb29a8b08799de8b621b444cef0bed6ec0df94950f3393628f3f975b6e2dcbc6
MD5 c07e98757a7eb2769b2a6a252a81e803
SHA1 702ddd90ecf12ce6648fb1366568a46a0bb6109c
SHA512 8b8a8fbb1ee855515eb0779b460f6e2401f1ddfb9365c68cd262b3bb8518266675a82a1aa59ed64a15ea7e5244f78368f86a5d49d66d55b2fb789085650ddecc
SSDEEP 768:GJ3Cruc7fZrKUkt51tvp5XSwQs88uBkiT2R61uwLs:GJ3CJtrvoBILNBoi5Q
TLSH
T1D2F2BF39BCE45873ACB69781B65A3343AEF09147C4C80B54D9DE7A1D02C779E274B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bec299c4-9122-47ec-a301-b6d5d9f5f255.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bec299c4-9122-47ec-a301-b6d5d9f5f255.tmp
Size 33KB
SHA256 459d0c89753831ba1b28fc3752bf83cec42f3b94139bd2e231f432791bc56275
MD5 1c463cd4e7ce3329fdcf552ed2978f2b
SHA1 d81cabdede2853957a6c095c269ee8838734fb4e
SHA512 86fc4228c49013df352899f7efc664da0c09b1b590aa9afe5faa0e8f61c4551dcf3bf82eb904fe27c06af01c4f2ff86bec527f11c5e17d4740286a91b5ba71fd
SSDEEP 768:NJ3/ruc7fZrKUkt51tvp5XSwQs88uBkiT2R61uwLs:NJ3/JtrvoBILNBoi5Q
TLSH
T14DF2BF39FCE45863ACB69781B65A3343AEF09147C4C80B54D9DE762E02C779E274B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edef28a2-8116-4d1a-9a80-0e9186b70436.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edef28a2-8116-4d1a-9a80-0e9186b70436.tmp
Size 38KB
SHA256 8bd81e538bc1c7213c5af17994a7981265f333f478e941b56ee23d5f1d82b5a5
MD5 2f7402007d9775e43de6465cb025d6df
SHA1 0995f1ef03489456e5dc49713854475a7a7cdc04
SHA512 a668d67948efe67d81e29ad13a82c2a7cef9b56e4d3e8b6fa26a3d1bb482dcb008d04b84357ee0be9275303b10a6434dd4ba1aafdd8b133c09b5b1e1a7896beb
SSDEEP 768:Q/UxvxjgC+t3/Ruc7fZrKUkt51t2p5XSwQs88uBkiT2Rilg:9Zj3+t3/Dtrvo4ILNBoog
TLSH
T1DE03C039BCA45863BCF2D385764B2347EEF05143C4C41BA889EE6A1E028776D574B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2bd54ef-e8cd-4da4-9958-e805f9fe1662.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d2bd54ef-e8cd-4da4-9958-e805f9fe1662.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download