82ecdc468dcf89681525046d2ae5a23bcaa7f935c5aefa4cc4fc2d33a41d327f

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 90KB
Sample261102-g134ls1vbw
SHA256 82ecdc468dcf89681525046d2ae5a23bcaa7f935c5aefa4cc4fc2d33a41d327f
MD5 b5b430a8904b33cf4af72ecba9934d5e
SHA1 0dcfc8e7762ee395d9c08396bfb0ab348ece7d59
SHA512 08a928f4cbe611a9df207dd579d52ce6e07472bec9a1a8869f406efc9991dd07be58a6ca54696c2d5ebb5a44bc2753d94b80c129697d25ae034a0369a3b67fbd
SSDEEP 1536:HuomIRN0sDn05uaMIU0X0rG93gXOr+WFDqaZXoXIivyYnfzLfXWJZQ8kl33FDn6K:HuomIRN0sD05uaMIU0X0rG93gXOrrFDS
TLSH
T1C6933531129AF43B5163A1D9AD736766F0D7541DDA530A00EFFC26690BDBEC0FA2284E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
456	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{EA8BB72A-DBB9-4E4B-9472-3061D9E13C9F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe
4284	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4284 wrote to memory of 3884	4284	msedge.exe	87
PID 4284 wrote to memory of 456	4284	msedge.exe	88
PID 4284 wrote to memory of 2608	4284	msedge.exe	89
PID 4284 wrote to memory of 4308	4284	msedge.exe	90
PID 4284 wrote to memory of 2608	4284	msedge.exe	89
PID 4284 wrote to memory of 2608	4284	msedge.exe	89
PID 4284 wrote to memory of 4308	4284	msedge.exe	90
PID 4284 wrote to memory of 2968	4284	msedge.exe	91
PID 4284 wrote to memory of 3584	4284	msedge.exe	92
PID 4284 wrote to memory of 2968	4284	msedge.exe	91
PID 4284 wrote to memory of 2968	4284	msedge.exe	91
PID 4284 wrote to memory of 3584	4284	msedge.exe	92
PID 4284 wrote to memory of 3584	4284	msedge.exe	92
PID 4284 wrote to memory of 4364	4284	msedge.exe	95
PID 4284 wrote to memory of 4364	4284	msedge.exe	95
PID 4284 wrote to memory of 1368	4284	msedge.exe	96
PID 4284 wrote to memory of 1368	4284	msedge.exe	96
PID 4284 wrote to memory of 4836	4284	msedge.exe	100
PID 4284 wrote to memory of 652	4284	msedge.exe	112
PID 4284 wrote to memory of 1304	4284	msedge.exe	113
PID 4284 wrote to memory of 3356	4284	msedge.exe	114
PID 4284 wrote to memory of 872	4284	msedge.exe	116
PID 4284 wrote to memory of 872	4284	msedge.exe	116
PID 4284 wrote to memory of 3992	4284	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffa597ec188,0x7ffa597ec194,0x7ffa597ec1a0
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,6005505903979203299,4497582516247715407,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:3
  2⤵
  - System Time Discovery
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,63079153729415221,6276415978499155253,262144 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,15304852692780040179,7961115131067157776,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,9100513498088966397,14952367078152629853,2097152 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,14991424516775620116,11352320314433856867,2097152 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,3125977383069809681,9994241562555250955,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,11734533004645636511,13033217402856126630,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,9116547295849341928,6144977389032834897,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,9116547295849341928,6144977389032834897,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,1902299123171404473,3615786429191685130,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,11845161211147282980,1017036223978133905,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,5351682174047360454,15505014551718170206,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,18386452366266499143,9257733465321496051,524288 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6016,i,13090466562030253375,16423074421004649733,262144 --field-trial-handle=2856,i,1137953089721537227,5295376251306949293,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4828912a-9848-4ffe-860b-7c22f450ebba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4828912a-9848-4ffe-860b-7c22f450ebba.tmp
Size 27KB
SHA256 d69ea13e226c9de8bafdd1a260cbfcc79f1efa5f3be3234eda472ab13a722d10
MD5 87c3b04366692c5fb3971e8b431ee303
SHA1 08a2fd1d98fc351acd505865e90a36c59d67b969
SHA512 3d9ae46debd1c1baa5f2d94a0b76691de59ec1769935b097ffa574c72488b6cb914ca4ce3de9e8c78d305c3fa7c88836ea2b74db442c4751cb2c8279eb84c1d6
SSDEEP 384:n9iFzQkUSvWs3sN28TUNTUlI4PaKMPqGwzWf/BChxMJXYIuemnH7vBEzdgL/7Izc:0Fd73nwgLk94BChxMJXYILmnH75EzvLW
TLSH
T103C24B32E895DE7BEDE74E95A30A3A43EEE09157D99C6AD0D9D91C1C00CB1DE130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

766fc17f-acde-45b8-8299-671ec0c1807d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\766fc17f-acde-45b8-8299-671ec0c1807d.tmp
Size 25KB
SHA256 e1752355c6c31bbbad490878c9f42a27db41b87dcc6daf72028835950059033d
MD5 6a08e8fba19893d29ea736affd8d16a3
SHA1 1bc032b07059bcb2507ff7bbae52340f01791489
SHA512 6c5ec48633dc6c5f326b615c2995ec32130e6292d1b64c05804564bdcb7efaba5ae436fd447c07913160e12ce83e56066b4dfa273f6fcf15625638d866bbb90d
SSDEEP 384:n6iFiZcI63sNo8TUNTUlIm2aKMi/4wzWf/BChxMJXY5FHsa+VY8gL/7Izno6:xFQ639wgc6H4BChxMJXY5FHhgRR
TLSH
T126C24A32EC99CABBE8FB4FD5AB4A7A03DEE40163949C5AC4DAD81D1C008719D1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e7ee525-0715-41a7-b1cc-9a21668dddb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e7ee525-0715-41a7-b1cc-9a21668dddb8.tmp
Size 27KB
SHA256 42fbe2ccc02747d0c6a1f09cc1119f3c92bdcf221ced5541d1382714fbc211c2
MD5 3b56c5d8cd8b2c6cbfa89dd3b41f4d6e
SHA1 1bd90bc2570da46fcc4649334a1568730da6b17a
SHA512 c7ab500b1cf595376419a6c7abe7c1ae464710b2923f126e4b6bf4242e1cfcb859992a97d6beed824e1cb623c85cd2d47a1b66489e842e93971e67f752466852
SSDEEP 384:nxiFzQkUSvt3sN28TUNTUlI4PaKMPqGwzWf/BChxMJXYIuXinH7vBEzdgL/7IzBC:YFdt3nwgLk94BChxMJXYIUinH75EzvLW
TLSH
T192C24B32E895DE7BEDE74E95A30A3A43EEE09153D99C6AD0D9D91C1C00CB1DE530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92fe4655-cdcf-4bea-9a1a-37aa3aefa16a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92fe4655-cdcf-4bea-9a1a-37aa3aefa16a.tmp
Size 27KB
SHA256 2ec02b35d5031ebc827f2b8f586d45e7f59bf6940c945513843de3eb50ab6651
MD5 b7a9dcfb0f5767cb57de4b5f12a68aae
SHA1 4d459840dc0d061846a1a728d962e85b1ba2be0a
SHA512 50a14181cf4dcb9da34a25b9cc84aebcfe44978e324d7104e65286aef4b2b944415c60a4c16367bc9cf4f474ab5c4f47dfa58ce6b4970a9dd999afe4cc180091
SSDEEP 384:nSiFiZcIe3sN28TUNTUlI40aKMXqGwzWf/BChxMJXYIuXinH7vBEzdgL/7Iz3op:ZFQe3nwg4494BChxMJXYIUinH75Ez9u
TLSH
T192C24B72EC95CABBFCEB4BD5A70A3A03DEE08153959CA6C0D9D90D1D00975DE130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

54302c14-9aee-4a84-aad7-a1b30bedede3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54302c14-9aee-4a84-aad7-a1b30bedede3.tmp
Size 414B
SHA256 2acf43901c1acb1e3751a3d1c735f9299ac29979ae0febb01954cf76d230da55
MD5 378a896f15862b82c473de92f32e6cc9
SHA1 a85bf62629d341939c15f2a616f14f9b26f2baa1
SHA512 497ee635da40d0a06f51676d1a63aba78d298cc754b1ca1ccd9ee10417f04fe060683f029f7ad3a364d560b27fd6dc2023339a5e90e6320a524da39d8e066cd6
TLSH
T127E02BAAC956EC3B18FD0B7C5094474AE71413AB2A50A94B3B3E81088FF0636418696C
MD5 SHA1 SHA512 TLSH

Submit Download

6156b3f1-b406-48c5-a66a-a3984ebcd0b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6156b3f1-b406-48c5-a66a-a3984ebcd0b9.tmp
Size 11KB
SHA256 ec18b114b05d42a734c804a0902803abad21bf3c0c3f627eca75a21ee9528f3f
MD5 c279e0bed2e100c48d79bfb152a6f828
SHA1 a21e69b206cb3e75d7172c1ff3152332627c1a81
SHA512 fcf2b1e2593d48b8597f92240e69e98b160a32d41d6849cefbfece769a943cba7356b82f218f87cd1f80b4fef5ee0f8d24949cc0ad6c898f7754366c09cb570e
SSDEEP 192:sxZcRIkl/fesvYaQZLi8zzodpHTHW6+WNGYorZnS1KIgjtxJ:sxZcNl/fespOlozHbGHSsjt7
TLSH
T1A742E8156D28A93FACC7D619FB15BF53E3F9503290951E48AAFC8A2C14EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78c447bc-a4a0-40ef-ada6-90b60f371aa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78c447bc-a4a0-40ef-ada6-90b60f371aa4.tmp
Size 12KB
SHA256 e8d721c67231dad6b669d831e8f55b2322af4ebac63716dbe33942257f15dcf8
MD5 59bb5567acbe0f9dcb09c383cb2db8ff
SHA1 36d1897c0beffbdb0e8679ade9b1e9987960a545
SHA512 b7d52677acf79ecdcb80231a4d8dcf362f21d140cb141776b01e94e31fcbfb2e32b64f19b487c5a57297cca3c40d3b9c39c7ff1dc420714c7e66ead5d231f6c1
SSDEEP 192:sxZcRIkl/fes3JQZLi8zzodpHTHW6+WNGYoxZnS1KIg5itxJ:sxZcNl/fes5OlozHbGpSs0t7
TLSH
T11042F9156D28A93BACC7D629FB55BF53E3F9503290952E44ABFC8A2C14E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8338be97-228d-4e0f-9fc0-42b02bf62ba9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8338be97-228d-4e0f-9fc0-42b02bf62ba9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

0bf66730-9624-4608-9e67-3dc9480883c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0bf66730-9624-4608-9e67-3dc9480883c4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

24c12845-8e3e-4c41-b279-0cfa21d65430.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\24c12845-8e3e-4c41-b279-0cfa21d65430.tmp
Size 1KB
SHA256 6a5d293a1b1bbea5d4a8b1fb3a6416c4707f4e0bf8b87d7e062252e51f9bf531
MD5 ca51b980cbd31bdd3936ce1bfa1745f9
SHA1 ada4a6ecdd7d817f8fba3bb7b864c16ea7e10b7c
SHA512 dd6971b4448eb7579c519092cd74d5e16ebcb1940ce225e1fe6b78c3160d742832faef7059dbab029a1b0c31e52a099521cb8f2b401eb5c8943d725f2fb81c1f
TLSH
T187319FF783B4866E8A0196F0EA18AE2FDE1D0515432C7CA9C9E4AF2793F3471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

88acdbb0-a250-410c-b66d-0b08e70f7f96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88acdbb0-a250-410c-b66d-0b08e70f7f96.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 d975889dbca7e621c90c597aaa03eaaaa9ea052e17df4de435b3fc9857a7b798
MD5 89f6b17a2b4bccc8b0be836e3af629c5
SHA1 83fc78fdf06516604c4bda16d74d5ae8dd6e036a
SHA512 f96d8fdddf755034c0e8c70b0616875240c854f6a621dc2539ff98eb2d6750d16b60ff11fc70941f6c2fc116af0cb5c66f241c7bd44bb9a9dd0fcc597fa0afc3
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgh:ST/2dXOJhJlpfnpp3tNXVrN3ojDAxBB
TLSH
T18AC2215571BB421039FE291C92B58B6E064231B33119E67B7FBD00A68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e0924285-6c7c-4a49-a346-d4e9eccf47c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0924285-6c7c-4a49-a346-d4e9eccf47c4.tmp
Size 12KB
SHA256 4d71d9803cd848b5210d216d3881ac3729ec6f3b65f84e921d7bed6261de8d7a
MD5 4df4ba4b8137794918a5340cf2514907
SHA1 b875b606c106332fc3ba8061dbb5a31cc93319c6
SHA512 29238177e1f75cbd1e24cfc502a0e8e592fa94b1946c0c9ab9505c66b1ff1ed24275c3f1c08e946970f2995aa6d561d7de4e92f8d9a4207176a9ec3967362da6
SSDEEP 192:sxZcRIkl/fes3YaQZLi8zzodpHTHW6+WNGYorZnS1KIg5itxJ:sxZcNl/fesBOlozHbGHSs0t7
TLSH
T16F42E8156D28A93BACC7D619FB55BF53E3F9503290952E44ABFC8A2C14E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9371023-1cf6-4c84-9e07-a15e5b5a58cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9371023-1cf6-4c84-9e07-a15e5b5a58cf.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2710254-b251-4450-b587-dde7d322af61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2710254-b251-4450-b587-dde7d322af61.tmp
Size 27KB
SHA256 e2b6d4cc47cedfaa5b26bb0c16f3eda563382c6693ecb8fa2c49fa55494f5f54
MD5 cf0c37f4e30fa09b8f728ab3d82653fa
SHA1 950c1ab6ffb645fe2e61a4748f2c3168d42c678d
SHA512 b55986e2fb5945df6df108aee6f5df1c1b88603c2f847404ae5ca6b3f968443b4267c1fe7f645ab3a50a2369d481b68603d3532d5fa815f7393fdb0a517cb6f1
SSDEEP 384:nSiFzQkUSvt3sN28TUNTUlI4PaKMPqGwzWf/BChxMJXYIuXinH7vBEzdgL/7IzBC:ZFdt3nwgLk94BChxMJXYIUinH75EzvLW
TLSH
T1C9C24B32E895DE7BEDE74E95A30A3A43EEE09153D99C6AD0D9D90C1C00CB1DE530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e65059e7-a68d-4acb-bbe6-ddad0f922f42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e65059e7-a68d-4acb-bbe6-ddad0f922f42.tmp
Size 26KB
SHA256 a61263ae7bda46461c551d8ed813ea734389c002f5aca95569a177701e181b1b
MD5 54b1da31d64e50ea4572f2310416655b
SHA1 ae2c9a7b6e9ed2e929217594b3621b92ea2b14e7
SHA512 481d4fb9af15f803fcd0b605eaa9a62782b051472e16e958f35b36b451a1fe45ea1b8c0984c4c99e17d765b3b06c5d2899972dd9d9bb464eaa75361c3d08d2e1
SSDEEP 384:ntiFiZcI63sNq8TUNTUlIm2aKMw8nwzWf/BChxMJXYIuEinsa+VY8gL/7Izno6:kFQ633wgchC4BChxMJXYIlinhgRR
TLSH
T19CC23B32EC99C9ABFCEB4FD5AB4A3643DEE04153D59C6AC0D9D81D1C009B5AD530BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e8cb50be4418ee336d41f0312bfd1ec25fe6cfd289faecb3e29b90bb0f2b0462
MD5 a68ae2207cfa7095a3ab76d1582c9c5e
SHA1 1d936ccb98a4d114a1572948f364427d759b7e6b
SHA512 798d7b845757e5a82b65bcf5f845f4250ce9b2503bafb323134dd054ab03cc4120dbeb188105bc7845133e35bbed8891f6dbbd2f2928dfb725e986a26bcb27cc
TLSH
T11D412A5CB6E9115CB3B76E16ABF6B8AE847EBD732E06D46D00110E4F4622B44C871B37
MD5 SHA1 SHA512 TLSH

Submit Download