f617b2bd325b2a68a7ea0250c13b2d7d48d806c8048d294bc2aeab3a893ba24a

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 53KB
Sample261102-2e2zmsxtdw
SHA256 f617b2bd325b2a68a7ea0250c13b2d7d48d806c8048d294bc2aeab3a893ba24a
MD5 1c7a7531069ed84391effc26d5c6d8f8
SHA1 e99734537d294334c9ae06b2dcadc879916a65cb
SHA512 de856ba3ac714f3756820cbd553ac131eb3641ebace581958315dbd64e19277e9f675a3b138f4ee56d562576e9f573c552d9d655176289b2a173f9952acf65f0
SSDEEP 1536:y1AG+GLIGUyoAU3rJEP0rQr++vrBrSYUdpsQo3jKSqfcvXR+d7uKVNQ3zi9ORNZD:0LmmbNZD
TLSH
T10433D717E7C62DB27F2136D99517774A2439830B5AC2C0EAD2B02C4C71E16FA979B0F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5400	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{A4EBF52B-D0D3-4DBD-B18D-1482999C3956}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3396 wrote to memory of 1392	3396	msedge.exe	90
PID 3396 wrote to memory of 3812	3396	msedge.exe	91
PID 3396 wrote to memory of 5400	3396	msedge.exe	92
PID 3396 wrote to memory of 3812	3396	msedge.exe	91
PID 3396 wrote to memory of 3812	3396	msedge.exe	91
PID 3396 wrote to memory of 1244	3396	msedge.exe	93
PID 3396 wrote to memory of 1244	3396	msedge.exe	93
PID 3396 wrote to memory of 3116	3396	msedge.exe	95
PID 3396 wrote to memory of 3116	3396	msedge.exe	95
PID 3396 wrote to memory of 3116	3396	msedge.exe	95
PID 3396 wrote to memory of 3968	3396	msedge.exe	96
PID 3396 wrote to memory of 3968	3396	msedge.exe	96
PID 3396 wrote to memory of 3968	3396	msedge.exe	96
PID 3396 wrote to memory of 3500	3396	msedge.exe	97
PID 3396 wrote to memory of 3264	3396	msedge.exe	98
PID 3396 wrote to memory of 3500	3396	msedge.exe	97
PID 3396 wrote to memory of 3500	3396	msedge.exe	97
PID 3396 wrote to memory of 3264	3396	msedge.exe	98
PID 3396 wrote to memory of 3264	3396	msedge.exe	98
PID 3396 wrote to memory of 5668	3396	msedge.exe	101
PID 3396 wrote to memory of 6096	3396	msedge.exe	102
PID 3396 wrote to memory of 5668	3396	msedge.exe	101
PID 3396 wrote to memory of 6096	3396	msedge.exe	102
PID 3396 wrote to memory of 632	3396	msedge.exe	104
PID 3396 wrote to memory of 4884	3396	msedge.exe	108
PID 3396 wrote to memory of 4616	3396	msedge.exe	109
PID 3396 wrote to memory of 1956	3396	msedge.exe	110
PID 3396 wrote to memory of 3368	3396	msedge.exe	111
PID 3396 wrote to memory of 3368	3396	msedge.exe	111
PID 3396 wrote to memory of 4980	3396	msedge.exe	113
PID 3396 wrote to memory of 4980	3396	msedge.exe	113
PID 3396 wrote to memory of 4804	3396	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff8135bc188,0x7ff8135bc194,0x7ff8135bc1a0
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7697487551021703726,13637713075252122389,262144 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,14450583790074323617,17442778636122926617,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,11616815496340452662,8747729627723005277,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:13
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,6038472564682718408,3390577245251615667,2097152 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3688,i,13383286657227830115,7863790128781259676,2097152 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,2093338323617804060,6386717567148303168,2097152 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,10134836333161173700,7055850046340878638,2097152 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:9
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,13100962044448866087,7818606112486891890,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,6374142424328685443,4010782512271524824,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,4543418945352980025,12722724126710527674,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,4543418945352980025,12722724126710527674,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,936838953177639853,3577046545104993486,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,155196022018003768,9141044871134934980,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,17827284245891326655,8180372138355458825,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,16597827784169555440,12355113608269142417,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:14
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,11105841780525582390,12475523293818045443,524288 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5532,i,18140816039616045230,315585089821908863,262144 --field-trial-handle=2360,i,2776236999176508297,17869138020514249473,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26823958-4b31-4435-8f8a-ae1c76bd33f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26823958-4b31-4435-8f8a-ae1c76bd33f3.tmp
Size 36KB
SHA256 61077d74aadd4dcf865d163236183e2f4a5f968f82eb59d71eeade4446fbd061
MD5 47d15d70389a24f68c557b4d09874a51
SHA1 4cd37ae382eb47f8c231de7d230b5a4d1002fea0
SHA512 5667e9853f9e03113d0465f2419de4263b31e460c4fc89dad82774349a798826e50a86b8097cff23d9a5272b8267b56376a24605a5461310fecad4d71cb9dff9
SSDEEP 768:YFdT3MwgUiU8c7fZrKIHYIp5XSwQs88uBkiT28E75EKD7LP:MT3piAtrt4mILNBxkJP7
TLSH
T187F2C036EC808977ADB29791BB5A3346EFF09147C8C40794DACEA51D01CB69D238BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e304613-19ba-480f-b303-b89be6ace64a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e304613-19ba-480f-b303-b89be6ace64a.tmp
Size 33KB
SHA256 c5fc9d375375e8ba0fa4ef23b3744e5b9c99725143f9733cebb88253978a2cd8
MD5 2cb6eb730932b6dfd2b62ca9986b2181
SHA1 db88e9fb180f4237af940dc15192982079f39861
SHA512 496f045068c13666eb49ba6820f1f38cc98a503b07fce3703675a162f2b90f7e39ccbf069308ae31ddc92879133d8315918644cb7f5981ffedacf7155f2889c3
SSDEEP 768:Ip3WiH8c7fZrKIHGp5XSwQs88uBkiT28E75EKD7LP:Ip3Wi3trtYILNBxkJP7
TLSH
T14EF2CF35F8905C739CB29392765A3746AFF0A107C8C80794C9DEA61E01CB79E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74356a85-1c42-4eee-b92a-abd5c69324d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\74356a85-1c42-4eee-b92a-abd5c69324d0.tmp
Size 38KB
SHA256 032c909c22c1798464fa79b284d85833a05593246bc8c32731a91b06827c5853
MD5 b602645271b26b3c5e9d75a560347600
SHA1 a6c876a4f6b192863716db84339ff73181ad7060
SHA512 ed03d36c6f4761b5c0ed4643e8808d2837c3992ee3b3d1e716c4b4e85becc9dd8c08d73df8448e07a488c89b0659ad9aee87abbd99cca1603a3a6181bddc7e3d
SSDEEP 768:R/UxvxjgC+W3AWWc7fZrKIHZp5XSwQs88uBkiTz8/P84g:kZj3+W3AktrtnILNBOHg
TLSH
T15803D039F8945873ACB39391365B274BAFF06153C4C40AA449EE7E0E02CB75DA74B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91f92e70-33a8-412a-9e77-7329859f5cf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91f92e70-33a8-412a-9e77-7329859f5cf4.tmp
Size 37KB
SHA256 5e6346b9fdb7420c3c66a7d63c815d0e7139564ea96e8ca5c0928c4f570c07cc
MD5 68aa765372c5c5a296061700ac9321c2
SHA1 f588509853182063a47995b838a79f8b42ef8329
SHA512 243a8a1ed084c7b6e7f73c13d33cc86cb6f3877149d0efd40b018ad679f4b8aaad19025a1c8df457c2de627df38304637f9ef49df5e9afdd327277537eb61e2e
SSDEEP 768:R/UxvxjgC+W300ZRc7fZrKIHAp5XSwQs88uBkiTCP/P84g:kZj3+W300Qtrt+ILNBuHg
TLSH
T13203D039F8945873ACB39385365A275BAFF05153C4C41BA849EE7A0E02CB75D670B887
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

46f7e450-37ac-41c0-ae20-5db849925cd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\46f7e450-37ac-41c0-ae20-5db849925cd4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b9bb2f6-2b64-4cd1-8c0e-bfa899c938c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b9bb2f6-2b64-4cd1-8c0e-bfa899c938c2.tmp
Size 11KB
SHA256 d37a2a9385cf56d7905c2f6ecb6779686b5b8ce008d3adfe0af4cd7d991f7990
MD5 952b087e04d21e27e7a994f77d12e1b5
SHA1 b651b778213f64b3f4027c2731c6d23af2a92dce
SHA512 23f349555cd8c6c4c3e35786680e89e0ea1cb9014c6d8206ac1d6a681da8b975c5a54f472ec966e7acf0998446eda0a3d12ca0e58c2ee7c6344e6921d007aace
SSDEEP 192:sxR7Rgbc/fcssHR0wzoA8p4H/g6+WNIYEpWzFGCIgDuJ:sxR7kc/fcss2u/5Ime
TLSH
T10142C815A924A93B9CDBE21DBB557F53D7F95032A1901E48BAFCCB1C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623288ce-429d-424f-b140-11b967839f04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\623288ce-429d-424f-b140-11b967839f04.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 d0eba4e2888cce979f540d5d4afddef773e4fbb8ac46244371a5b6f609c00d1f
MD5 9d8fedf524efac250693917c17f0e88d
SHA1 70fda2f5dd77f317d29d46128ce2255e4b081c11
SHA512 b731ee3d34fb18641aebb4c7461cd501de631bd92d92905904376fb5d0181d8816960f396fe3c56609548e5295af4bd8c3760267eeec540c02d27edec98798d3
TLSH
T1A2E0268A48EAC32EF308649743B8438C8280362BA3C0ED0E1B44D8C4B601440A7CA6B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 19f06353dd2e2c58d44731554b0767722b2766625f4e22e53660db0e3be8bd14
MD5 a90bf28cb52e517f540f36c43fec5d34
SHA1 56fde1f2e69aa40e5c68faed8d678380ac826a1d
SHA512 e6565cc528ffb2c455a630a24f52339b8e909c1eee0884c12a0784bff8559300ca049148c71f65e114020ac2f82c4234938b31711c832ae150931cca916baade
TLSH
T18A21EB83CAA81089F784B634DBC537733AF8F98E55431E410964C8B5BA4679C7154F7C
MD5 SHA1 SHA512 TLSH

Submit Download

f3a5d30e-d7ff-4a95-bce7-82ebd3ad1caf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f3a5d30e-d7ff-4a95-bce7-82ebd3ad1caf.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

294efcf4-f13d-456a-91bb-bf08477cdd8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\294efcf4-f13d-456a-91bb-bf08477cdd8d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

34b3bf20-fa50-46bc-bb87-b8668ca4a7ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\34b3bf20-fa50-46bc-bb87-b8668ca4a7ae.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

b9e0ebb8-0fcf-41c5-b84a-4e4e9c84ad74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b9e0ebb8-0fcf-41c5-b84a-4e4e9c84ad74.tmp
Size 1KB
SHA256 f2069f3651b4126fb3e4838b1118b652a47c1573edf9c54a52bd5d4c2a7c8ab6
MD5 3ae5e646e95245ab72278328e859681c
SHA1 cf6144bb1530dfc7438d98c3bdd8a39b8a1bc8cb
SHA512 032c82c0d8be1dc41db971e5c48a40edf4b7788745f46b055771c1ae1cd38aea419a9af6a0621a4608dade11560f09be04d6c0e875da068cc34dfb92dedc309d
TLSH
T16131AEF783B4857E9A1196F0AA14AE1FCE2D0515432C7C6A85E0AE27D3F3462E045A9B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3257391b2c7e0f3872f50404369baea887b83b3a1ea889cf7e1cc75f01f7c539
MD5 c264dacf4c297521f51d176ab634fb36
SHA1 a11a8cafbea81a4e2d1e3f9cb80b501461e1c67f
SHA512 9b7fea76f78922eadb952e07dc3adf4794cda0700e3defe376b2859e8dcb5e52d5fe039424160fdde945b27bc94001e0bfda3f68404bc90d60bd1681525e36fc
SSDEEP 96:Kj1iPz1fvpcj0kirpKKgilp29ls7PaakgK12WOzKKYQw:g1iPz1fvOj0frpgil89ls7Parnlp
TLSH
T14891FF4530BE124139FD290B9274871A025235F3706AE53B3FBE50E29AA7E056EFCDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c486760d-353f-4d71-8334-5844f664b2e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c486760d-353f-4d71-8334-5844f664b2e3.tmp
Size 11KB
SHA256 3a4557bf6d72037380d75cacc0de3d8fd2289f1179e0f2793f89ae3867f36ca1
MD5 8b91e0a3ff5eacaa6ada04554fd0d12c
SHA1 f7987ab2781396a1f36d0c710857364afdf7bb1f
SHA512 c25ba7c07c4bc87e757c21a80f1e96512544ebaa7055c54c421dc49e8f47f0309d7b755bfd3b45be9654c30f3fb859f88cb984a563592c8f2bfdebbd364ced71
SSDEEP 192:sxR7Rgbc/fcsOHR0wzoA8p4H/g6+WNIYEGazFGCIgDMJ:sxR7kc/fcsO2u/5IHE
TLSH
T18032C715A924A93B5CCBE21DBB557F53D7F95032A1901E48FAFC8B1C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f09f9eae-1685-4888-a8a3-3690dc2c4caa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f09f9eae-1685-4888-a8a3-3690dc2c4caa.tmp
Size 11KB
SHA256 5caa4c4c0a67eb64431edd206b0278d07fcfda3855b093bb62b01d70245653c6
MD5 ab57a93ef2be85e8b4d5f811f072af8b
SHA1 431921284baa2693fb6b88bdb8abed5702510bdb
SHA512 d71aed539e20106b15b31f547fd86914c8e15bdc41ba5bf21642d9d1665b33194648befec5f5e8722730a349f43d5d61c49138bb200a1105c367d2cb118615f5
SSDEEP 192:sxRoRgbc/fcs9HR0wzoA8p4H/g6+WNIYEGazFGCIgIJ:sxRokc/fcs92u/5IHs
TLSH
T16B32B715A924A93B9CCBE21DBB657F53D7F95032A1901E48FAFD8B1C04E7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffa9545a-5619-477c-8538-e213d247c3ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ffa9545a-5619-477c-8538-e213d247c3ee.tmp
Size 23KB
SHA256 ae1a4fe608f43b147d782a3bd026d38812e5b8320739901c368aa40c0892bbb8
MD5 eca8b09d27122ae941ad5d6d9558bbae
SHA1 f9ce93747ccdf3c55510a875857ee3f2d6550989
SHA512 2b5ced23ff4a08a3028013b905c33f366e3d6b5225c03b24989c1bb90dad68dce630f24847571304f9bba7608e7a21dff3082b153553f35107d42efe6373ab0c
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRX1roJes:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VX
TLSH
T12FB2D92B640CCB7F4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

575d8754-4019-4989-9075-45bf331dc626.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\575d8754-4019-4989-9075-45bf331dc626.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e3d6e56f-bcb7-4bf7-87a0-ea01822db244.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e3d6e56f-bcb7-4bf7-87a0-ea01822db244.tmp
Size 33KB
SHA256 6c1937e2dd04f274e3aae9e0ac8f18f6d1eeb79ed9579db08dec6c6e6bc751c1
MD5 41e6494bf6a8c5cf79116045f1b6aa6f
SHA1 cdbbb329b1de67dfab5867b45ea480f837ddf399
SHA512 36a4c8bb260ebdb2350cd715654eed0e23a4fe3c146b176517622f5bd3466e789766a253ca837b3837ff7f55ff56cf133cf0309527e65be584ea3ec6ac4b65c5
SSDEEP 768:zp3HiU8c7fZrKIHGp5XSwQs88uBkiT28E75EKD7LP:zp3HiAtrtYILNBxkJP7
TLSH
T1D8F2CF35F8905C739CB29392765A3746AFF0A107C8C80B94C9DEA61D01CB79E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fad2ed9c-7660-4076-8ee4-b215c2d1f4b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fad2ed9c-7660-4076-8ee4-b215c2d1f4b1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download