dbcc51220f17ec0b4636f96821348955b335a83f65cfecfc6452ab2e7ceaaa7a

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 112KB
Sample261102-g15mfaec55
SHA256 dbcc51220f17ec0b4636f96821348955b335a83f65cfecfc6452ab2e7ceaaa7a
MD5 1264e06cb32ec3eca38a9426fa3572cb
SHA1 e7de285c9146a1a3a650f5f0da234c4dd68900c9
SHA512 182e4f79832b3c3d99d7666d6f239f9427a9e756ce255312e874d6ef7b2440161b3b8095410a14776ec62b49b44df5994cd52644e565067f32d9633deebef3ea
SSDEEP 3072:tuomnsW56XEZoBk/V6BRSOnilcT/ch9mx4/B5vzRAZ4QjRpZjEHhBBEm5lSGeXoR:SoBk/VAV5SZSJXfS
TLSH
T1B4B381309145287F0327F6D0D8A25B1EA8D791BEDE570600FABC57B927E3EA4DE36142
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4636	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{58FEA150-310A-4114-858E-BA74BC8EC516}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3232	msedge.exe
3232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe
2076	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2076 wrote to memory of 2208	2076	msedge.exe	83
PID 2076 wrote to memory of 4636	2076	msedge.exe	84
PID 2076 wrote to memory of 1684	2076	msedge.exe	85
PID 2076 wrote to memory of 1684	2076	msedge.exe	85
PID 2076 wrote to memory of 1684	2076	msedge.exe	85
PID 2076 wrote to memory of 776	2076	msedge.exe	87
PID 2076 wrote to memory of 776	2076	msedge.exe	87
PID 2076 wrote to memory of 1928	2076	msedge.exe	88
PID 2076 wrote to memory of 1928	2076	msedge.exe	88
PID 2076 wrote to memory of 3916	2076	msedge.exe	89
PID 2076 wrote to memory of 1928	2076	msedge.exe	88
PID 2076 wrote to memory of 3916	2076	msedge.exe	89
PID 2076 wrote to memory of 3916	2076	msedge.exe	89
PID 2076 wrote to memory of 4620	2076	msedge.exe	90
PID 2076 wrote to memory of 1020	2076	msedge.exe	91
PID 2076 wrote to memory of 4620	2076	msedge.exe	90
PID 2076 wrote to memory of 4620	2076	msedge.exe	90
PID 2076 wrote to memory of 1020	2076	msedge.exe	91
PID 2076 wrote to memory of 1020	2076	msedge.exe	91
PID 2076 wrote to memory of 2920	2076	msedge.exe	95
PID 2076 wrote to memory of 656	2076	msedge.exe	96
PID 2076 wrote to memory of 2920	2076	msedge.exe	95
PID 2076 wrote to memory of 656	2076	msedge.exe	96
PID 2076 wrote to memory of 644	2076	msedge.exe	99
PID 2076 wrote to memory of 3448	2076	msedge.exe	108
PID 2076 wrote to memory of 2856	2076	msedge.exe	109
PID 2076 wrote to memory of 2516	2076	msedge.exe	110
PID 2076 wrote to memory of 4728	2076	msedge.exe	112
PID 2076 wrote to memory of 4728	2076	msedge.exe	112
PID 2076 wrote to memory of 3232	2076	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff7caec188,0x7fff7caec194,0x7fff7caec1a0
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,15084967949355798235,1864866485000854970,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16279846507506751626,7003687260869143131,262144 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,12298771938060234387,8733669074557811095,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2414436221197135919,11585248752818643306,2097152 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,4555917592118405395,7062660329440709024,2097152 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,15961894053601898409,5302756941109978413,2097152 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,2560408465326885227,5191080470761658525,2097152 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,53308239771864909,6422598690445947244,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,14856659192915427036,9323263032375340571,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,17529145522765409410,735780686872670127,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,17529145522765409410,735780686872670127,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,11135172048033242061,3621859696025235123,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,14155644135813540550,11174307013002031341,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,17067237874293881843,13053654937896153215,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,17331498936847304332,14469934775124621762,524288 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6432,i,18274064215750403057,450287251775312149,262144 --field-trial-handle=2260,i,5337139607073088979,17966467135060206550,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3232

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

20a21dca-1fa2-4033-876b-b2c54663cb69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20a21dca-1fa2-4033-876b-b2c54663cb69.tmp
Size 18KB
SHA256 64698222bf7b49cecaa4eba35d1543b88b9b9da802880e031609a98c4c93f816
MD5 3b9f858ee6838891ed3a25b631f63dc8
SHA1 5ea0217dc8286043f17eece54db2b8b5b72a66e7
SHA512 709a88a7ac336ef76801056548d13247be5e3df758339dd394f0c40938a50fab52567a447e323765b3678ec089981c953de02807586ac6ed86fefbfd57a58cfc
SSDEEP 384:bQkUSv0sNjUTevZIbqeHX58EA8xJjXtDWYH7vBElpIIlV:V0mvHYaqtDWYH75EHL7
TLSH
T191827D31A879AD2B2AF3A515F14A3503EFB4901BD6D82F90D6DC5B1D00CE29D239BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28e130da-b0f5-4b99-8cf3-501e305dff0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\28e130da-b0f5-4b99-8cf3-501e305dff0f.tmp
Size 18KB
SHA256 dd2bae50c5bf283da61c79e5e7b8bea06bd7d4d2928c205d721b4c1af9291a20
MD5 d0bcabc78b41ce875add86b183e42dc9
SHA1 1298671f3579fcc4afa6f965e4f3b248403652a9
SHA512 aeddb11ece4e552c105f494b3304337616bfdf55adb00c4319a2588d0f3f55da012a7e61e83acc9b00b3e6ef89212df1092248e9f9e5e46d0a68be809aba0d7b
SSDEEP 384:2QkUSv0sNjdTevZIbqeHX58EA8xJjXtDWYH7vBElpIIlV:W0zvHYaqtDWYH75EHL7
TLSH
T1F7828E31A869AD2B2AF3A115F14A3503EFB4901BD6D82F90D6DC5B1D00CE69D235BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c3c5d38-5861-4712-ad85-741783edcd40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c3c5d38-5861-4712-ad85-741783edcd40.tmp
Size 8KB
SHA256 59a9cce459f134db301ce0a9820c0951cef5b76d78cd2431ba6ec9988e0cb4d8
MD5 745a96f6e9f4ceca95d40041c6bb00af
SHA1 72da456907cc32dc61798d5069e39cd265c4c316
SHA512 00ab93f9565ed12bd2effe4f70782d0080ffc5beb88767c554be7873c2096ca523553a361088531ae478509d022d5d7b4299c76d83e7e0efb39a46171a5eff26
SSDEEP 192:2ONG6wlDjQmiUyAba4X58gZYjzorxJjX/veDUqwsVU6:2ONG6kVxa4X58EA8xJjXeDWYU6
TLSH
T155120835F968BC2B6DE2A445B08735039FA5512BD7897F90C6EC2A2D01DF2AC534AD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8d890124-9da4-4666-942f-67c960793eb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8d890124-9da4-4666-942f-67c960793eb8.tmp
Size 21KB
SHA256 7f8180ec194583e1ad86e9480aad3197e8a90c7cb619d440380ca378c1a8d4dc
MD5 3d6734d5353ab8c30be48085b4226cc2
SHA1 0343325b4c00c72686117a60233240a14f2a288b
SHA512 d871df630ab0d4b12bce9472b8ac5a95ff65502f9aec259c9c6ec8d8a0bac74f881b13611d4d3f50ffae87777756f358234c29777cf109c69e045c0fb1072fcc
SSDEEP 384:PiFzQkUSv9zsN98TUNTUlIldTevZIbqeHX58EA8xJjXUDWYH7vBElpIIlV:aFdFAwgmvHYaqUDWYH75EHL7
TLSH
T154A26C329898DE3B6AF39A05F14A3603DFB59067C6996B90D7DC9A1D00CA1DD234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

28cc652c-eae7-4050-b4c4-d997d98810d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28cc652c-eae7-4050-b4c4-d997d98810d2.tmp
Size 27KB
SHA256 69e27bccade1cae8ac67aa6162f4dd548921dbc9a8e8a87826cbbfa8799704b6
MD5 7f7ae68c8df88dde2d6321e52d318d00
SHA1 3ef5163b23a2ffd7803fe8458af5f98857425b40
SHA512 d804fc4ee82dc337c934e77798eab619b126afe71e4008242553842d6a25965bf16e5fc4395bb8faa55617073e8fe384f788e85a2cb4a6a684cb368b6ff1d664
SSDEEP 768:w1y4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbHroRy3:w1y4J/DWvbtBhu1jajiLm0bUQ3
TLSH
T103C2FA3B684CCA7E4FC00A9DED5E6F9B3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

451efe6e-826d-4b66-9f86-e0661b65e741.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\451efe6e-826d-4b66-9f86-e0661b65e741.tmp
Size 9KB
SHA256 b73a0489b970cdd13c05a13f1a2960c24e61689a44811bb5158e578852de5666
MD5 356468db8d052c6a014d86fbeaa742e2
SHA1 1f4507c615a8fbf027025508efc492f0da7e2ae2
SHA512 b354f182b306428001cdb56d3bbfef90b3d0fd9f6278d71729f86432c2c899ab90220476dec658d8772249e54db820dfa38235fbade67a564ad3e45af580cc4f
SSDEEP 192:sxZKR1WB/fmseCIdpdIHW6+WNGYrvdq5IgrJ:sxZKGB/fmserCHbGj9
TLSH
T1AD22A7526E28A97B9CC7D21DBB15BF53D6F9543251D41E48EAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c43f3b3-19e7-4f25-8ed1-506d511110e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c43f3b3-19e7-4f25-8ed1-506d511110e8.tmp
Size 10KB
SHA256 dac6c6b84cc6744f21ed9dc6e50ac8b39c9bf03cc7a70c34e0640b6127448023
MD5 884310510d311afea2daf72b9603b692
SHA1 54914686339e2117ce1ab71353f59e94303be26f
SHA512 2abefbe83a6e22ef9ee9448357b335bccdda71abb0687a728c5cb3ffd66cd66cdfd5ee82c15fefbd101a6771e03e5f5f2e718ad9a89a366342e69981c8a2a49f
SSDEEP 192:sxZKR1WB/fmsMCIdpHIHW6+WNGYrVcq5Ig5fJ:sxZKGB/fmsMroHbG4X
TLSH
T17022B7526E28A97BACC7D219FB15BF43E6F9543251D42E44ABFC8A1C04E7BCD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9df000ba-9328-4905-98dd-453c503a8f31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9df000ba-9328-4905-98dd-453c503a8f31.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fffa838-b703-4da6-b38d-34edb801e673.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fffa838-b703-4da6-b38d-34edb801e673.tmp
Size 10KB
SHA256 e657d01acf98817d172764f796f5429291da1bf89a4c541b10d544ff927a606a
MD5 2022bc8a92749b9e82c76b4209f1298d
SHA1 ea7d462cad276fc36a70859a8e97865cf2bac89c
SHA512 5771c8ab0582bec2b076fae82598e9bdd0a4bdcde5d111f808c1c433113f2f6bcdcdd85131b1adb9b09c09baeef3a3f022a4c9608ed4a4354e2d9f5196b23f60
SSDEEP 192:sxZKR1WB/fmsMCIdpdIHW6+WNGYrS/q5Ig5fJ:sxZKGB/fmsMrCHbGsX
TLSH
T1A222B7526E28A97BACC7D219BB15BF43E6F9543251D42E44ABFC8A1C04E7BCD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 51c4aaebc80ae2c4d1882a429f494e96298b0eae3b832ca273068dbdc20d0e93
MD5 b346bf6886f806fbaae3de739364e023
SHA1 6f1483a8eed087f9516335dcc12f49c1a64942fb
SHA512 37ce3d0355f762b224b43bc715a6f92aefae56c85b67acfc6f0593b9804ce4e941468e04a6c612f4793fa1f19d67f9ff443917ed41e1d2abcda6b4ab0bdde2eb
TLSH
T1CD615FC152B0486DFB69E37286FA1067B5348C728EE3ED72E454F8F95C0632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 380e01bb0e61142d151f364c25194b2f6db6c639c787a1f96e54daeb96bb1320
MD5 403634877944fe79e22832796fc0fd5d
SHA1 c9fe302fad65c0f22a5efa46fb49e18d1af4673d
SHA512 4bfc5f89fd2a95cfc3f915972d083814c986f47bf0ec85c09febd090ba58a9d166545e93ac0aee4413bbc68858ab849c8caff61ceec6efc3ebc502a9bcca577a
TLSH
T1316151C156B0486DFB68E37286FA1067B5348C728EE3DD72E454F4F95C46320716487E
MD5 SHA1 SHA512 TLSH

Submit Download

335c3fae-9baf-4fb3-ae80-3e9a29575739.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\335c3fae-9baf-4fb3-ae80-3e9a29575739.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

48361554-1ee4-409d-b751-d774f24a3f6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\48361554-1ee4-409d-b751-d774f24a3f6e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

4cfb9e32-6f22-4f9c-b1c3-20a9e62f2416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4cfb9e32-6f22-4f9c-b1c3-20a9e62f2416.tmp
Size 1KB
SHA256 204d72eb031a31337d549add7fdfe1fd1c106ea4ae1f3e5107e398077ba89c2c
MD5 1691eb0e536b926dcf6840c1e076197f
SHA1 b1a39cf376fa720fdf743a8e0b3e6cabbf009b02
SHA512 0d6ef39272974d8d6fded4c7505956b79a263b316ff4e7ab6e71d40bb30983e65b07ed626f39ec374abb57b43afb17e1c4b31af1b3e7726929add681decfa4dc
TLSH
T1DB217CF383E0866E9A0156F09A14AE1BDE1D0516421C3C65C9E4EF2797E3071D10265B
MD5 SHA1 SHA512 TLSH

Submit Download

64cefce5-3e0f-4be6-b4c2-d7063343747b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\64cefce5-3e0f-4be6-b4c2-d7063343747b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ea6f76aa-7865-48d0-a17a-cd2a9d923beb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ea6f76aa-7865-48d0-a17a-cd2a9d923beb.tmp
Size 9KB
SHA256 0a56689e83304571834ec75e29cc14e957b430d3ac92c8c645b3aa7cf241cbc6
MD5 c65cd89a01f258a7f34d8d0e65be90db
SHA1 75bee3a0832d0f632efd7d41d74447abdf32b5fa
SHA512 177611ecd659c4ea51c182ca43ef81e343e59b4d7ca270d0c0720706d3e13baacfe5493085fdc88bda4d4ffd9b4462a2d4a4182cd07f841c8ebd2f83da83905e
SSDEEP 192:sxZKR1WB/fmsiCIdpdIHW6+WNGYrvdq5Ig51J:sxZKGB/fmsirCHbGjx
TLSH
T15522A7526E28A97B9CC7D219BB15BF43D6F9543251D42E48AAFC8A1C04E7BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e4fecf8f-7bb1-4215-a574-a8e4bcc03d22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e4fecf8f-7bb1-4215-a574-a8e4bcc03d22.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

261254ad-206c-4322-91ed-781a43d95c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\261254ad-206c-4322-91ed-781a43d95c24.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ff66f245-4993-4a04-9fb7-0585c02fb8a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff66f245-4993-4a04-9fb7-0585c02fb8a2.tmp
Size 8KB
SHA256 7c7130abca8c855730bb655b330757df4ac4a4d847cb8f1e3973b858d8c28752
MD5 2c9f37ffc87e55456bce9bc3397d88b5
SHA1 2aeb8d7e7b6e3019f43d2f456d024f7933188720
SHA512 40633dec2429ef1b44cad2ca14450c88b50bc1309db3a883fbc389680021169707c9c3a930f023c5f208923e3e478bdaaddf0cc0218fdef2d89fe0c1f337ac09
SSDEEP 192:1ONT6wlDgQmiUyZbW4X58gZYjzorxJiDlD85U6:1ONT6kgGW4X58EA8xJiDcU6
TLSH
T101020A34F9787C7B9EF2AE09F58A26139FE5102BE6552F44C7E81B1D00D765C2346923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cd7d9e52749428fafb379f3d52d2295320badbda0b7a6aa1e9cd3b450408c3b6
MD5 2c8e69ee8ab2db30ba01b8f861af8e8a
SHA1 56ee60a51fb0e27a84bed60f20ee94751633e90c
SHA512 d9b44b02c8cb0e1f9815051afd64f4a822be1ce5d98a8299380924559044719b1fd12e23630f38214413949d327241ade6ce2fd72b69ab198818f08fa09d2fe8
TLSH
T12F413B58B6F91148B3B76F4AAFF6A86D487FB8372E06D59D00110E4F4A66B00CD61737
MD5 SHA1 SHA512 TLSH

Submit Download