dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 01:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261102-bm4v4aes91
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1000	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4057491610-3392471755-192832105-1000\{5C295827-1E8A-4E1C-8211-DBC1713BD0FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4304	msedge.exe
4304	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe
480	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 480 wrote to memory of 1500	480	msedge.exe	90
PID 480 wrote to memory of 1724	480	msedge.exe	91
PID 480 wrote to memory of 1000	480	msedge.exe	92
PID 480 wrote to memory of 1724	480	msedge.exe	91
PID 480 wrote to memory of 1724	480	msedge.exe	91
PID 480 wrote to memory of 4564	480	msedge.exe	93
PID 480 wrote to memory of 4564	480	msedge.exe	93
PID 480 wrote to memory of 1812	480	msedge.exe	95
PID 480 wrote to memory of 1812	480	msedge.exe	95
PID 480 wrote to memory of 4896	480	msedge.exe	96
PID 480 wrote to memory of 1812	480	msedge.exe	95
PID 480 wrote to memory of 4896	480	msedge.exe	96
PID 480 wrote to memory of 4896	480	msedge.exe	96
PID 480 wrote to memory of 1556	480	msedge.exe	97
PID 480 wrote to memory of 2164	480	msedge.exe	98
PID 480 wrote to memory of 1556	480	msedge.exe	97
PID 480 wrote to memory of 1556	480	msedge.exe	97
PID 480 wrote to memory of 2164	480	msedge.exe	98
PID 480 wrote to memory of 2164	480	msedge.exe	98
PID 480 wrote to memory of 2908	480	msedge.exe	100
PID 480 wrote to memory of 2908	480	msedge.exe	100
PID 480 wrote to memory of 1508	480	msedge.exe	101
PID 480 wrote to memory of 1508	480	msedge.exe	101
PID 480 wrote to memory of 716	480	msedge.exe	103
PID 480 wrote to memory of 4676	480	msedge.exe	107
PID 480 wrote to memory of 5016	480	msedge.exe	108
PID 480 wrote to memory of 1768	480	msedge.exe	109
PID 480 wrote to memory of 5888	480	msedge.exe	110
PID 480 wrote to memory of 5888	480	msedge.exe	110
PID 480 wrote to memory of 5396	480	msedge.exe	111
PID 480 wrote to memory of 5396	480	msedge.exe	111
PID 480 wrote to memory of 4304	480	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff91541c188,0x7ff91541c194,0x7ff91541c1a0
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,2562405960980706747,621189835841771715,262144 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,9772833651280172371,12454731683581484424,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,13034659523985774320,14502438740705728888,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:13
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,12246843121794708699,13971075838318862261,2097152 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,198385254401201636,12273475802714345834,2097152 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,500900426388133068,16032968964059699390,2097152 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,5535788713859179035,6987209988683531142,2097152 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:9
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,8373999446764751877,18130317001703601261,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,7200200760164290678,10533632812030106903,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2260744335370516032,13356883116637733656,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,2260744335370516032,13356883116637733656,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,13666666180606172044,1507072532935280445,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,14217553318148083234,17673773281991296574,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6475225649105043792,6328052075755225761,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2252,i,8023497927957336078,13301119579475933381,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,15772731183321119685,11493309366811222353,524288 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5820,i,5951046275534407691,14618078947155481379,262144 --field-trial-handle=2496,i,9712607806060437360,12957939852108631801,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4304

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

23147804-a22f-48f1-9e4a-57e3a3ddfa93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23147804-a22f-48f1-9e4a-57e3a3ddfa93.tmp
Size 36KB
SHA256 558c62d430847dc8b49462e9102e23eae23e695fa7a0d762d96bafaace18ffe6
MD5 5d42447154547c01e9d9074bb6d37e31
SHA1 dd975418acef4dfef6c798ae1463dfe7f61a2bce
SHA512 aa13854264907a2eb8daf759ca6a3f737864a12e1c9f3587cddd197bd9018e3bb22c4938ffaf9516173d5b94bfa941adf6946123d9f0eb4435d9954114b05040
SSDEEP 768:JFd93VwgQ8lKROE57Y0GZxJsXBdK8ZbSE75E0Lh:193AF70/JsXf78kbt
TLSH
T1DDF2BF31D8D08E775EB7D790B60E3757EEF082A3C9C95A94DADA9A0C00871DD1387D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40314e79-b7c9-4fa3-9f87-58edde648eaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40314e79-b7c9-4fa3-9f87-58edde648eaf.tmp
Size 34KB
SHA256 05c7df339c1a10156de43cc5f63c726fed166aaee37c911a7b50186d4f233541
MD5 5657b61bdbab6e69f3a85e84253c9b8e
SHA1 14baa41d70d24b91088f3627884bc449c9f84035
SHA512 c5a635f86ef38667303ae7774f7f3bfb2ea16ad9337b432d880e0b6a8ab8b1c68a0b393e4a6c3a294a3e512f2b5c96cdf258d5a2902e41d1303f14b012f3e365
SSDEEP 768:cN3P8lKRzE57Y0GZxJsXBdK8ZbSE75E0Lh:cN35q70/JsXf78kbt
TLSH
T196F2A030E8A05E775DB7D391720E3A97FEB0D653C6C90E44D9DA9B0C018759E138792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e58235c1-0820-44e2-b94d-f82521a6118b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\e58235c1-0820-44e2-b94d-f82521a6118b.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe09a9e94fbd795d6fab442dc426ef79e7bd47dbd80086b003cb1cd34d18db58
MD5 4da51a25f1a6b822ac642c6eae6f9a72
SHA1 9d4f1d1e83270c8d54d24725cd3d7f406de5967d
SHA512 c027a48a18b3b282e84d69320ca44ca416bceb43057eee8fcf4b2647669c307720f00240e17a22310df0488100938fd8b34a0660ca73adaa5f0433a1657b325a
TLSH
T16CD02BBCB76CC476E40210744042050052617004AC1704D10F0562448984080804114E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 54a604899198f01e1a2f5ec52bac53679a6d2775840ba8c81ab97c59f718adf8
MD5 b266cfe7dc8e59a4693bec2c7307d768
SHA1 0ff4c63ce201552fd340f72d3376df63989a21f9
SHA512 6832b9d56510cdd21708734b256b052e90f313f920ebc959b4845a1a4fc17cfbfe75dfa04c5252540531ead21e0662a341763e79030c36867f2823312c51c0f9
TLSH
T1C1D02BB8B77CC476E40210784043050052517004581704D10F05A2448984080804014E
MD5 SHA1 SHA512 TLSH

Submit Download

2b2df998-ead7-415f-8a50-7a1636e7b856.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b2df998-ead7-415f-8a50-7a1636e7b856.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

35b86a4a-2f76-4be5-9fd9-ef4e0b92a0f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35b86a4a-2f76-4be5-9fd9-ef4e0b92a0f0.tmp
Size 11KB
SHA256 6f8b995a3cfd68496022c9bb1d60a8be01d85a72c1e4d344e216f595608bb7a5
MD5 ea5f036ea6a3464aa690eee96d77a9b5
SHA1 d58d5f1097b4fa3e1a6735af95c2f5a7b83c5e53
SHA512 838433259762ac2f093c6692cc5aa75e388009f472d4827ad86e1581514f79c1ff0347b093b4c956eddbcbd9446ed5a5d77000c79ae9d348ef81f73678d667ec
SSDEEP 192:sxRDR+bd/fbsv4ZkAzoA8p43/g6+WNIYU2RedemGlIgDfJ:sxRDmd/fbsv4Zk5i/5I6t
TLSH
T10632D815AD68A93B9CCBD24DBB597F53D2F9503260912E48B6FC871C14E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c676f62-6507-48ba-857f-fe9769a16ba9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c676f62-6507-48ba-857f-fe9769a16ba9.tmp
Size 10KB
SHA256 cc9da5ca4f544a471aa0e22042b48b793e96751462b42afb1528eaac38e4bc7f
MD5 fa97a6522fe1943cebf64421c18eb878
SHA1 bb140d779f31336c422c47c66f651e9cf7191e60
SHA512 a7851abb507908da8705c2f4b59116b2c326b0d20ca0d2cae7dd4f647d45d54949b2025be57c14c0756e7ae5fa48281942a765ab49ba1f0b4c40177661f6f478
SSDEEP 192:sxRYR+bd/fbsHYZkAzoA8p43/g6+WNIYU2RfbemGlIgIJ:sxRYmd/fbsHYZk5i/5ITs
TLSH
T10532A715AD68A93B9CCBD24DBB597F53D2FD5032A0912E48B6FC861C14E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57a260bd-f8e2-499c-96c9-4e547c04414b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57a260bd-f8e2-499c-96c9-4e547c04414b.tmp
Size 11KB
SHA256 ecdd57e9137fa453fe2519d13422ced480f787433faeec892281acae84a29809
MD5 1ea0ac994ad6b8ad830d75fc65cf2200
SHA1 a56b4e451bbb00c5d3d646dd765cddf5789491e8
SHA512 52691067c543360fed32a8a58d446c34ffb0b239d55727d5f23af58176aa402c8fe9ecd803b73e905acbb2f8be3a7993b0bd93dc94c850b9ac04e72f5cb5c6ad
SSDEEP 192:sxRDR+bd/fbsvYZkAzoA8p43/g6+WNIYU2RfbemGlIgD5J:sxRDmd/fbsvYZk5i/5IT/
TLSH
T1CB32B715AD68A93B9CCBD24DBB597F53D2FD5032A0912E48B6FC861C14E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c4140d1-8d38-4cab-9852-0a5fb80d6fe2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c4140d1-8d38-4cab-9852-0a5fb80d6fe2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f83c154-5850-4277-ba90-17b63ac6a022.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f83c154-5850-4277-ba90-17b63ac6a022.tmp
Size 23KB
SHA256 e3c7e9e1ab362e852d392115fc64017beb8d7b5fb1c09481beaa142245a40225
MD5 9be6d6bf690a3e5dfac0df3b83ccba32
SHA1 9d55a467306bdae5aaa0e90a2899991761fae094
SHA512 85648d98d43776d4c860680279c36311add9948f7b1e184a4d950d8f553f5be50b8285bbb8e77c2abd0bfe78be74e2b50eaff5e547975bd315f53e25add6674d
SSDEEP 384:64qajXwfCtgmcFfsO7nKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV+a9mWRu7roz:6JajXKWgm0fsO7n8F1+UoAYDCx9TuqhF
TLSH
T1FEB2DA3B640DCB7F5FD00AAD9C19AF976D9802CB96588D4047FE984C02C77FA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 df82cbef9c0f7b7a96b07de2d8bc77db17d2ae54609850604f029765fb52a344
MD5 c3b33bdc3ff807faa297e4472749b5e0
SHA1 fb019a90868401548099284d40e32b721c0904b5
SHA512 eec2558b113d12a93019454f4dd6bc3bfd296a8ef94518ee3bbf78c15650884ec468ed0395080d4f831c68fdfacceee7661658781228d399972228e876e37987
TLSH
T1C3E026F505CAC23EA308B8CB01F8535CC280361BD3D4E95E1B04C8CDB541D40A3AE6B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b01e64dcb9a0dc202594ba77b42cc70cf6f2258be6191b533063af4b6fd6c284
MD5 851b35c4af903e6ac48909ddbe64d8d1
SHA1 16d9c308b9cd4e73e3516f3a9e320d93727b9da3
SHA512 a455a23f532c493f30d39ba0b53d53989115c623d39b7c9251cd771ea5e5b5042fc2657a3a0ec173acada96b2f392b6dfef42564a03e641582a2ce30c1e3fb32
TLSH
T1DB518531E15348F9F7FC267C9ACD0C8B36B45AA372473FC2809CC5782882BAE9154B14
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 769df292d484c6bf9459c24773c93c32c6fd2325ff8798950cf4ce8e4ea77c07
MD5 a8c809242f974eb3084a0b4324187398
SHA1 f7da0b27b700ce98d4876290d4d20656dd6fa235
SHA512 bd87c71c51723611278286ff76ed0549bcb088c24136abf285136a0405d63dcc9c255a4ecaf0522fd87be42fba3a661621070a73578cd8b5e7255e619c51f4d3
TLSH
T154517571E15348F9F7FC16789ADD0C8B36B49AA375473FD2809CC5B82886BAE9154B04
MD5 SHA1 SHA512 TLSH

Submit Download

ab253480-8b15-4210-a807-22817fe085f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ab253480-8b15-4210-a807-22817fe085f5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0f3829c2-da38-4042-aca3-c99f3c007787.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0f3829c2-da38-4042-aca3-c99f3c007787.tmp
Size 1KB
SHA256 095a4d185ff37a8c2b4044cb46343c18794bb810b4f89a49bd9c400fdea5819e
MD5 58ffbae0c48a5d5d87804f65a5a63eff
SHA1 0a027fea16af3d8bfbcd195ecc02d8a6e3d36f85
SHA512 5122cac4c62f8ff14360755d2beb8a4b7fe01bc4f098382d9a2be79461f4618428a60fbb8c74d167f24c07ab13717dc27f1ef30ea4b9c934ad564c995ee6c375
TLSH
T1A641C3F787F4867E9A1186F0EA14AE1FDE6C0515432C786589E0AE27D3F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

12c411c4-76a6-4c10-8d92-fe5a2b9816bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\12c411c4-76a6-4c10-8d92-fe5a2b9816bd.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

deadc4d2-e1b0-40f7-97ae-d69847a0dc5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\deadc4d2-e1b0-40f7-97ae-d69847a0dc5b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6743534a6e4946ca08a714dd3b3887c761c2e22f337068f29fc9fb4eb02ed389
MD5 5e679dc7b852ffcc6f5d70e42ab0a879
SHA1 7dad9b05584bfea3d5e02667ea9e8bc3a95cad9a
SHA512 134303044b347e15aff30220d0773e4d96394431b9cc62809d64ce807e7a14cbe57bc115c52f927d987fca7b780ff1c04d6c1180c2704dd7906f28e9c0b8507c
SSDEEP 96:KGBTBuBHBjBFBhBVBgBBJBoBzLBLBgKjB1LB9Bg3BbBLBYBdBzBtKq0K7CceoKXN:WfXgnN
TLSH
T14391D22170371200397D3D8DE2F9A69A024331E73178A5AF3BE984568E67E554EFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ceffeccf-1d05-4fd4-a259-9790de66d8e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ceffeccf-1d05-4fd4-a259-9790de66d8e3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ed46a12d2bef6d4b39b66463486bd47b45147c2cd9f4dc0e1ae6aecf947774ca
MD5 cf320b222a9a68780530bd37d51670ad
SHA1 af0d47b702c90093ccce9a946d09db426deb9369
SHA512 094ee6b6c636d49e0630e1925a5259694be4dd4857e42a7bbb26fd0e1af48a4eecd51c1418721bb1a6003a75d55feabffdd8ddb93aa2a58259ea7c8aa469f31f
SSDEEP 768:A/UxvxjgC+I3RgKrE57Y0GZxJsXBdK8l+SHUPpMs:tZj3+I3C70/JsXf7sSfs
TLSH
T15203BF34EC909D635DF7D3903A0E7797EEF486B3C5C519A88AED9B0C028B26D034395A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b94e2a32-9c79-44c7-a52e-e5f179837b64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b94e2a32-9c79-44c7-a52e-e5f179837b64.tmp
Size 38KB
SHA256 106f59452f0a18d19bbf96f629b26fcd9ed360739c0d3c67c6f9f5305e59629e
MD5 1d1be7ba0d5ec4054f144912b09fa59c
SHA1 77f60c0d0861f2b8b9dd58f73081d2272e1ff70b
SHA512 a9eb402438af2cc5f66142d17eb08aa06f3572581496d5a41619e59180b084c016792c81529f5c9b0a63afd656cf9d125d1395a5662ab1d2406ea30085d7db07
SSDEEP 768:q/UxvxjgC+I3tPTKR5E57Y0GZxJsXBdK8EbSSHUPpMs:vZj3+I34Y70/JsXf7/Sfs
TLSH
T16B03C030E8A09D735EF7D391390E7787EEF486A3C6C51DA84AED5B0C068B26D034791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f3ebe88-380d-4013-9645-794016c30c66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1f3ebe88-380d-4013-9645-794016c30c66.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fdc2ac26-3da8-4ffb-a433-d5853911ba30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fdc2ac26-3da8-4ffb-a433-d5853911ba30.tmp
Size 34KB
SHA256 fd3a7b1d9b2acf196104fea93ba7dcb6fcd8d7a5c6df0e7c18110318a41f8235
MD5 98c3c0ecea170ac6a6d8807e9be2e732
SHA1 f4d4203b449d22b11cf01a00051f42e0e4e4d0e6
SHA512 add46c65741b9f05f7c42ff05770fa2a39606f0bd6e7bd50447e70b4f8d138bf0649639f4369481ab4ba38ac26d098b7aa614592ce74016e48c8e79569080699
SSDEEP 768:fN3m8lKRzE57Y0GZxJsXBdK8ZbSE75E0Lh:fN32q70/JsXf78kbt
TLSH
T1BEF2AF30E8A15E635DB7D391720E3A97FEB0D663C6C90E44D9DA9B0C018759E138792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download