2a4610827e042b279d5d7274dcf732e27ad4951ac3b117f285cbbf516db545e1

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 320B
Sample261102-g15bnsec53
SHA256 2a4610827e042b279d5d7274dcf732e27ad4951ac3b117f285cbbf516db545e1
MD5 41a0c8797a6a62afe7b63c784005fc15
SHA1 3fa719a16a7ace05b4740fd62f2e89e4a2b59146
SHA512 5f53ea03c55a7e2b88b6aaed00450a4f12e497f793bda4e6d0e1b3c982989c2a05cd200e3388d48ec2f157e11a50ec8cd3ad19a18d953f5f6208fb293cfe7218
TLSH
T138E07DDCB1149515E5E2EFA011F6E7821AA6C2832DC0000CFCD024CBC0AB75ED6063EB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1404	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{0DFDC904-31B1-4FBE-8CAE-E6E0F5984063}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4964	msedge.exe
4964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4436 wrote to memory of 4732	4436	msedge.exe	88
PID 4436 wrote to memory of 4584	4436	msedge.exe	90
PID 4436 wrote to memory of 1404	4436	msedge.exe	91
PID 4436 wrote to memory of 4584	4436	msedge.exe	90
PID 4436 wrote to memory of 4584	4436	msedge.exe	90
PID 4436 wrote to memory of 4628	4436	msedge.exe	92
PID 4436 wrote to memory of 4628	4436	msedge.exe	92
PID 4436 wrote to memory of 5624	4436	msedge.exe	93
PID 4436 wrote to memory of 5624	4436	msedge.exe	93
PID 4436 wrote to memory of 5624	4436	msedge.exe	93
PID 4436 wrote to memory of 5476	4436	msedge.exe	94
PID 4436 wrote to memory of 5476	4436	msedge.exe	94
PID 4436 wrote to memory of 5476	4436	msedge.exe	94
PID 4436 wrote to memory of 5564	4436	msedge.exe	95
PID 4436 wrote to memory of 5564	4436	msedge.exe	95
PID 4436 wrote to memory of 5564	4436	msedge.exe	95
PID 4436 wrote to memory of 3376	4436	msedge.exe	96
PID 4436 wrote to memory of 3376	4436	msedge.exe	96
PID 4436 wrote to memory of 3376	4436	msedge.exe	96
PID 4436 wrote to memory of 4416	4436	msedge.exe	97
PID 4436 wrote to memory of 4416	4436	msedge.exe	97
PID 4436 wrote to memory of 4416	4436	msedge.exe	97
PID 4436 wrote to memory of 4308	4436	msedge.exe	100
PID 4436 wrote to memory of 3636	4436	msedge.exe	101
PID 4436 wrote to memory of 4308	4436	msedge.exe	100
PID 4436 wrote to memory of 3636	4436	msedge.exe	101
PID 4436 wrote to memory of 5452	4436	msedge.exe	103
PID 4436 wrote to memory of 4488	4436	msedge.exe	107
PID 4436 wrote to memory of 5800	4436	msedge.exe	108
PID 4436 wrote to memory of 5096	4436	msedge.exe	109
PID 4436 wrote to memory of 5448	4436	msedge.exe	110
PID 4436 wrote to memory of 5448	4436	msedge.exe	110
PID 4436 wrote to memory of 4964	4436	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7fff0dccc188,0x7fff0dccc194,0x7fff0dccc1a0
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,6405157952227976781,4926909941285251186,262144 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:2
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,8682915640457262725,18312021725405993134,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,2228736528465116140,4451341139117490633,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:13
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,506127911847104172,9630802068399637454,2097152 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,14901908444425048361,15437043206397493570,2097152 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,11373721800223556597,14440117463487323915,2097152 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,3076466724850612540,12403727261928092458,2097152 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:9
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5252,i,2131805782936633759,9732744195224573444,2097152 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,11941569176290742542,7456263116461228788,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,10459867415552708820,16577205236786302287,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,5117605022910944115,17982207358523110131,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,5117605022910944115,17982207358523110131,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,7147942969320290048,1634161796854335946,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,17130877750813388299,183950746701672163,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,11581820994756077213,14044509674695468996,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1524,i,10504105383805053026,6818854867955775815,524288 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3060,i,13485939867630040460,13811121434489975271,262144 --field-trial-handle=2740,i,9481090075901914754,15386701322724612244,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3baefee7-4f26-499f-ad5e-cf13c2555822.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3baefee7-4f26-499f-ad5e-cf13c2555822.tmp
Size 33KB
SHA256 528c2b3034a5cb4ba3f2a57f5ec6e25ee15254143b9c2a100a0fe0e5962bdfb0
MD5 3ba3973d8b14b33647b450d088eabd4f
SHA1 293f44e843fc18a3f1d083c95f613eefaf3a5070
SHA512 a422cdadf1b2dfc878684fbbe4d0716b56e918a56b6f7b7481337c972ad41a16ba4ba0d938d9e7e5a01470aa65b99c25486765a8bc3038aed101f6b1c4a58768
SSDEEP 768:XH3YC3sXybNbg+5OeRFZD1fTos7RjQE75EHL7:XH3YC3sLY1fT/REkoP
TLSH
T118F2AF35F8D59D334CF2D251E20A7A87BFB49653C9CD158495CD5E0E04CBBAE2387826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

806712bc-ef8a-48b5-a231-2698079eb43e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\806712bc-ef8a-48b5-a231-2698079eb43e.tmp
Size 36KB
SHA256 e58dff583298bcfbb19276b5bac0504261ad69b3dde39403544c6c9a63536eb1
MD5 27664256647f25e19e19a544809c4a3e
SHA1 56f2f877177d10baeb08871400d8b0f541cf5a95
SHA512 dee95c8c91bbc757420e8b90ccb982d8c4a2a694d4e7283e6cf2b2bdea17b6d96220e6d89f00afa26ca5349883e5076af74331006aa5582e7bfe7f27a7e834be
SSDEEP 768:EFdf3rwgtC3sXybNbg+pOeRFZD1fTos7RjQE75EHL7:of3TC3sZY1fT/REkoP
TLSH
T1E0F29E36B8D48E379DF6D750E20A3A47BFF082A3C9C9659496CC5D0D008BBDD238B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96b6e321-7551-4267-a5e2-7224f0585554.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\96b6e321-7551-4267-a5e2-7224f0585554.tmp
Size 38KB
SHA256 36600cda8763baeb733e80007c9ce617f3a13c288199ba41de3713eafad478e2
MD5 cd6b1365efef566ff44891adb162211c
SHA1 ca00ade15021329635a82283ef0b7061f1121eeb
SHA512 8325d4d942dc6bb6f06ddbcbc7ad42f653c25c2efc2a41c4e23dc053287a71fc4809b548605143795e54c22e9f856538e1d9c346f698ad13537704cfe2a29411
SSDEEP 768:a/UxvxjgC+j3YC3YXybNbg+5OeRFZD1fTos7RjQ1Bp:fZj3+j3YC3ALY1fT/REXp
TLSH
T1C503C03ABCE56D335CF6E250B24A7A87FFF4556385C9289809DC1E0E05CBBAD134781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

181326c8-0a55-4b90-b051-66f38edf0df5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\181326c8-0a55-4b90-b051-66f38edf0df5.tmp
Size 11KB
SHA256 5b16c4e3715ffc675cb28507e441fb031b72edbea3472cff0f0acc9d1150f699
MD5 e759e984f434d75155275d05090ce391
SHA1 02bfa16f18ced03e61d1252cae5747417aa9432f
SHA512 e3cb40fedeb045d878bb1437584cb6aa6d3b9b03b810dbaf29935aec834b99f55b58bd3870b094660df456bda62790b734cd95908303975c822a7d5e797d11f0
SSDEEP 192:sxR+Rrb6/f2seK7xZczoA8p4jy/g6+WNIYDoXqGJIgIJ:sxR+V6/f2se61Oy/5ITs
TLSH
T10432C8159E28A93B9CCBE21DBB55BF53D2F95032A0946E48B6FC861C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c9dad6a3b36fad78caccf59f1035337b1c6f12348f1b2c456f3258f6d35ea981
MD5 dc02f24b170b0701b7a02959d71df85a
SHA1 843788bf1deb056597aaadf1bc1e410de00c137c
SHA512 0bbe642233fae1e3c42082dc132d0e8de65aca212d810ea7e9fc62500a9b356d3622964b30096b09f33c72eb35a4a6aa99dc7600019195c07371f1ebad0169d7
TLSH
T1E5514DB145BC7222D3949C3941C72987FA74D6B176C33EBA2BE6D4354F6B314B80682C
MD5 SHA1 SHA512 TLSH

Submit Download

748d4735-07cf-4898-ad31-95d9c8173d63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\748d4735-07cf-4898-ad31-95d9c8173d63.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

10af8243-d9ab-41b5-a41b-7e839dc26143.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10af8243-d9ab-41b5-a41b-7e839dc26143.tmp
Size 1KB
SHA256 2b01005fea28396fbbd58e3b808ef7ad7f71c946d76ca0f1d5d6c3f5f935d811
MD5 02cf2c9777ef2c0d4a426cca6b16857e
SHA1 5549c9047b48676898ad668c90cfd8c97dfb7940
SHA512 0b5063bf37a7f782ecfb95b8e4045e0568d49d3f89c2f702fa54a9496ffdc98f3a1263f604a9e09e93a6881c1bfffeece3b1216ac3379b2ea57b87be380b9c3c
TLSH
T16431C2F787B4857E9A0196F0AA14AE2FCF1D0515432C7C6585E49E27D3F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

78eb2aac-7980-420e-8faa-660f49ef0bad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78eb2aac-7980-420e-8faa-660f49ef0bad.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b9697d39-f26e-45e9-b048-a76731a373a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b9697d39-f26e-45e9-b048-a76731a373a9.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a8c4545b09d93887705b34a65c8b1b8a81d5eb524117e8e3a2e841efcefd2585
MD5 635cce154920281f82114f9245e0cec6
SHA1 bfb384a1684c97f1553137fb778c8b2c1c30f96e
SHA512 863e45acf45c61880f32783e906a0448c93963bd9de5b854b6f17b6a6e19236df2366bf90cffaba2dfa5f9c337867b8dd1e80cbfa0da3686a1172ddd2fb6d920
SSDEEP 48:KoLIdKUU4jyZSI/KzS4/xItKK4IvylQBqWAw:KoLCKUU26SEKzSQxKKK4C2QBqWAw
TLSH
T18D91425531BB060039BD344E49B4965B12C231F33428E57B3BBD84B98E6BE151EFE9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ab38f219-1ae5-4a16-8c49-6e8c09a7f632.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab38f219-1ae5-4a16-8c49-6e8c09a7f632.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1d167cd-3ed1-4e07-a79c-94a2bb60ec67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1d167cd-3ed1-4e07-a79c-94a2bb60ec67.tmp
Size 23KB
SHA256 d6f0bfd91d4ca783d60d0716378c7cbd36ce635fc34d082531729fc99b3dc233
MD5 4c906d36639b0eae6d62fda5c3922cbb
SHA1 82ccce190f0593a897059f83d6372c850f3238f9
SHA512 f3f7a63daf5408a0555509163dff00cee72624aae6adbd8f463f57b05db1d9afe992086302ef386585ed729f1254c70ab20d26c00f95d3df69d484cae82d9c7e
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9FroTyn:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vk
TLSH
T194B2DA2B640CC77E4F804AADAC1A6F977D9802C796988D4047FE995C03C77EFA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b42471ba-238f-4286-ac28-a3b3928d31c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b42471ba-238f-4286-ac28-a3b3928d31c3.tmp
Size 11KB
SHA256 07bdc4158b2f6f0b7a5b4a94ce81f5ca4ceaba48d821bfffef5470533983de99
MD5 493baefc770a4dd87817efce2bc4c1c4
SHA1 8ca9831059bc200ad69292086d087766d3452976
SHA512 c74bbe4f6dd506cdab3bf8f1686ca7423bf6acbedabbb50598680f739dd1f6f41efb36d03868cc5406fbc7457d2519dea8d021b5876a3065e670f6202eb8cc7d
SSDEEP 192:sxRhRrb6/f2siK7xZczoA8p4jy/g6+WNIYDoXqGJIgDwJ:sxRhV6/f2si61Oy/5IT4
TLSH
T16832D8159E28A93B9CCBD21DBB55BF53D2F95032A0946E48B6FC861C04E77DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4958a13-0571-4fb0-b148-badc7623ae85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f4958a13-0571-4fb0-b148-badc7623ae85.tmp
Size 11KB
SHA256 d6d7841858436268bba04e325cd4d6f0420b2cce375a215b8da0e6475bc315a6
MD5 cd3037ce3a6598fbc3a750466e0b6789
SHA1 b1e3e44fa3618ba2b8707eca6a31c12f287d9bf3
SHA512 0b506893725fbf31bdf0e1423b4f8775b36c6fb9c6db7b7040c33d2c84b3e112e85d8e1703cf7a9a2f0273d45f9c518dfb79b6f9d790a985a2621a6302bd05cb
SSDEEP 192:sxRhRrb6/f2sdK7xZczoA8p4jy/g6+WNIYDBJqGJIgDSJ:sxRhV6/f2sd61Oy/5Iky
TLSH
T1F442C8159D28A93BACCBE21DBB55BF53D3F95032A0952E48B6FC861C04E77DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

acb438cc-9e14-4ede-8b44-77d7c944181e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\acb438cc-9e14-4ede-8b44-77d7c944181e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d869467e-5bda-4dc1-b231-58b35cacd9de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d869467e-5bda-4dc1-b231-58b35cacd9de.tmp
Size 38KB
SHA256 c8e6a2298d950d673802bc68d724abcf6d72c1e7cf27d39f65eab03f4f972074
MD5 d392bc3ee8679f93be7e4ec5d5bc6ae5
SHA1 0c4d0a47668024cdd659ea34ce3e8322f8723a0e
SHA512 35e9095c659cd468030898b29ac3993a115a6d68fcfda52e9495ee5c75f2b66b4be2419148af9564d951075f5726f90e8b840c5f60ddf61501d7de2ab3bc68c7
SSDEEP 768:c/UxvxjgC+k3q2BybNbg+9OeRFZD1fTos7RCQ/+Pu:JZj3+k3qM9Y1fT/RTKu
TLSH
T15E03C03AF8D45D339CF6E240B20BB64BBFF455A38AC919D409DD2E0E058BB9D134741A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91918382-a064-4976-a99e-7ec3d46c58e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\91918382-a064-4976-a99e-7ec3d46c58e0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f6bdd882-01fe-4b50-87d5-43e156040ce6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f6bdd882-01fe-4b50-87d5-43e156040ce6.tmp
Size 37KB
SHA256 469be5fd06575a23254569346d56b4c41c45395d8cd5cebf281c3f1bfef1faab
MD5 bf3bb07a69660efead1c69034554aa3a
SHA1 1e1554cf3a0b92145c53c828db61da9fe68ab574
SHA512 3c33413cfd74a7f079818b1930c3d7a64a3ac9ea2c975c303d1934922b7f76cb422b55e185adca382f535371f1af19b767ec26d7fb74c1f3cab591b223dec520
SSDEEP 768:z/UxvxjgC+k3IspybNbgrOeRFZD1fTos7Rzg/+Pu:GZj3+k3IeoY1fT/RMKu
TLSH
T15703CF3AF8D46D338CF6E244720AB64BBFF055B395C91A9809ED2F0E058B79D130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7893ef0-f55a-48ee-ac80-04865867cf4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7893ef0-f55a-48ee-ac80-04865867cf4c.tmp
Size 33KB
SHA256 590c007ad248314f620b7fca0220538a97140ae216516ea0c5e5db9f0f693854
MD5 fe46cc88cf23d7186121547ad450f167
SHA1 f574c61d14c03d3cbae62debdcef912de88e2318
SHA512 2e19c4dc1027f8f20ff92739543c4df78ac69fe1ea6516a3e213919d729e3920ee41e25f7ed7f326abf366f29346f6fffa2a72d25d3394b6a676693334f9e216
SSDEEP 768:GH3RC3sXybNbg+5OeRFZD1fTos7RjQE75EHL7:GH3RC3sLY1fT/REkoP
TLSH
T175F2AE35F8D59D334CF2D251E20A7A87BFB49653C9CD158495CD5E0E04CBBAE238B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download