929b8164e24678c671bb04ff49fe4fe3b5a470873d4602c02ce870a7e365ef56

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 09:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
suspendedpage.html
Size 9KB
Sample261102-k1pg1aef44
SHA256 929b8164e24678c671bb04ff49fe4fe3b5a470873d4602c02ce870a7e365ef56
MD5 00bfdc2e47d626b4ad0e32aada1c884d
SHA1 9c76e67ad01822b3446d81d47cd4dce56a94152d
SHA512 d5ee480c9342e96636eeee498ca38bf7aea8762255cf0ae760da301ef26e6c927748efb93ba0f76c56d51837cb28457b2f541e43ebf6290090d7923312df318e
SSDEEP 96:KIwK2Olj+I10P2Tay/5Z4QNsYrHx/5FB67ubwZzBhJhwKjIH1Dy3z8:sVOV+I10P2TayTamHxxEubwZphwTVEz8
TLSH
T1DB22602A128110661833A3B9AFE39B4EF7E25023C70683657DDD22524FF56F1A5A3F4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4968	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{B4D02D4F-B85E-43A2-BB2E-1A9ADFD88528}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe
628	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 5112	628	msedge.exe	89
PID 628 wrote to memory of 4968	628	msedge.exe	90
PID 628 wrote to memory of 3704	628	msedge.exe	91
PID 628 wrote to memory of 3704	628	msedge.exe	91
PID 628 wrote to memory of 3704	628	msedge.exe	91
PID 628 wrote to memory of 5252	628	msedge.exe	92
PID 628 wrote to memory of 5252	628	msedge.exe	92
PID 628 wrote to memory of 5980	628	msedge.exe	94
PID 628 wrote to memory of 2752	628	msedge.exe	95
PID 628 wrote to memory of 5980	628	msedge.exe	94
PID 628 wrote to memory of 5980	628	msedge.exe	94
PID 628 wrote to memory of 2752	628	msedge.exe	95
PID 628 wrote to memory of 2752	628	msedge.exe	95
PID 628 wrote to memory of 5948	628	msedge.exe	96
PID 628 wrote to memory of 5948	628	msedge.exe	96
PID 628 wrote to memory of 5948	628	msedge.exe	96
PID 628 wrote to memory of 6016	628	msedge.exe	97
PID 628 wrote to memory of 6016	628	msedge.exe	97
PID 628 wrote to memory of 6016	628	msedge.exe	97
PID 628 wrote to memory of 2552	628	msedge.exe	99
PID 628 wrote to memory of 4324	628	msedge.exe	100
PID 628 wrote to memory of 2552	628	msedge.exe	99
PID 628 wrote to memory of 4324	628	msedge.exe	100
PID 628 wrote to memory of 1312	628	msedge.exe	102
PID 628 wrote to memory of 4228	628	msedge.exe	106
PID 628 wrote to memory of 4780	628	msedge.exe	107
PID 628 wrote to memory of 5744	628	msedge.exe	108
PID 628 wrote to memory of 4424	628	msedge.exe	109
PID 628 wrote to memory of 4424	628	msedge.exe	109
PID 628 wrote to memory of 204	628	msedge.exe	111
PID 628 wrote to memory of 204	628	msedge.exe	111
PID 628 wrote to memory of 4268	628	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\suspendedpage.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffe7ec3c188,0x7ffe7ec3c194,0x7ffe7ec3c1a0
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,4263916585588545921,18268916834734318923,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,7359294236365656400,12452773661934672794,262144 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:2
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,11362953908396805564,11870029747539437627,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:13
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,8949051441070862467,3440688736988197211,2097152 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,14024062206868385639,16419233834395349655,2097152 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4388,i,6370844721700177202,18138088174147614554,2097152 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4408,i,1019233013468690812,1903819921355764049,2097152 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:9
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,10418446573626690175,15852129124419170890,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,9574890457236891578,14358600762471782618,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,14944188585596066303,14547373727106690474,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,14944188585596066303,14547373727106690474,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,16847651766269772809,10866738571518705264,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,14819020158985263761,14510228320445568329,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,5438236452661018477,14171408948847764899,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12984347117857252197,8932398945277906929,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4825973062296303521,2971846051733815227,524288 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=1940 /prefetch:14
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5424,i,16272991632880293791,15338216574939917057,262144 --field-trial-handle=2436,i,1229001019818164228,17227294477034436215,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4268

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27e4a4d6-8e0d-4cbb-8f17-11c2ab4a3bc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27e4a4d6-8e0d-4cbb-8f17-11c2ab4a3bc9.tmp
Size 33KB
SHA256 4bb3ff0180406171bd1184626ec9c067016d79240187fb65f98c67db334df688
MD5 d254fb80ccd9135cd161657581835683
SHA1 5f7699252755d2bea85786096a89c8d04a1b3b04
SHA512 acae81192d79fef3f27fa71408f09acc4f5f73391e1303c5703834e85f94656878079029a405df85b9a6258fe8db0f8f3884b284d72bde3f0263461b14ad1173
SSDEEP 768:hp3Qd+Dc7fZrKN1tw2p5XSwQs88uBkiT2BE75E7Lt:hp3wZtrC7ILNB8kIp
TLSH
T1C1F2BF35F8959C636CB2A381B75A3747AFF09207C4C80794C9DEA62D01C779E278B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8028b7c7-fee5-41e9-835d-1ed2847b0969.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8028b7c7-fee5-41e9-835d-1ed2847b0969.tmp
Size 38KB
SHA256 9eeedabad856622c8fe0e7afab26392254a6921503d9dfeb4aff2c5318f82759
MD5 68be9108945c451aff9535ec9b74998f
SHA1 65f06192139d1c028bd508df6d70b8dede71dbed
SHA512 24561760392f50b6f9bcf7f3b698ce87323644e88ca442847bd1df9b1be88d70eb977adf4f011a7382a27e7590991436a420b853c86d39a2efcfd453dc9d3327
SSDEEP 768:U/UxvxjgC+d31dUDc7fZrKN1twWp5XSwQs88uBkiT2BAS:BZj3+d3XjtrCJILNB8AS
TLSH
T1ED03D039F894AC63ACB3E381375B2717AFF05153C0C41AA889EEAA1E02C775D574785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e2c4e7a-78c1-41b4-b0fb-cc1308dc93f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e2c4e7a-78c1-41b4-b0fb-cc1308dc93f2.tmp
Size 33KB
SHA256 c5ef2637c346da81749fa49b078e728506272f84ac4409f7739ec0aad62e44a7
MD5 162d9f903e97b96ba1749fc215440a7d
SHA1 aeddb3d48e0dd4eaf0f7d1120ada0ec103555ff0
SHA512 67438ada9eeb88ccd1ec958ab9707474d0ce8f0bad833e029a04f2f4da7a8f96a89363559f340c137aa4857cc851e0fb9fbeb3aca8cf0752a5d623b3a4083b38
SSDEEP 768:Zp31d+Dc7fZrKN1tw2p5XSwQs88uBkiT2BE75E7Lt:Zp3XZtrC7ILNB8kIp
TLSH
T1A4F2BF35F8959C636CB29381B65A3747AFF09207C4C80794C9DEA62D01C779E278B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

1e09223b-0b51-460d-8a97-da71e314630f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e09223b-0b51-460d-8a97-da71e314630f.tmp
Size 11KB
SHA256 c403e90d7e14d9f974de686b05910673ab699b5670088a0550cee4db64ef9b41
MD5 8793702f7be57a3bc7d85567cf3590d8
SHA1 8608d4d6b41a555d2e1dfd9bbe19bbe90192c6c9
SHA512 f13f0cf25f127a3e884dadd04c7319b24dc56eda75be55bb8ef1e468d71da4c0421cd0f69f13fbafac2fe1d68524976ca28893fe9b8e5666861f1e38c6283349
SSDEEP 192:sxRZRPb4/f1sXQHRHzzoA8p4T/g6+WNIYEyNUGbIgDkJ:sxRZp4/f1sXQoy/5Imk
TLSH
T10B32C715A929A97B9CCBE21DBB567F53D3F95432A0902E48B6FCCA1C04E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e8c300f-f8e1-4728-b81a-9c7cced066b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e8c300f-f8e1-4728-b81a-9c7cced066b4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a5ef5c94afe9c4b5f48da6b4fd4b3bf386a55b49fc6a3b65dff905a9e34e22d0
MD5 cc2c5731da8a21db8f23b7f107beac7e
SHA1 38b245c5b69ab08883bd163c8e0feb75653f2b17
SHA512 6a0f852fe5eb53d77354b3a94feb3a5305a1c733d4579894b3f73941e7a6343881161d66eb92fad1700638bd16480bea7db13719b381dfe777df962125d15da1
TLSH
T1ADE0CDE629CDC23FA229688743EC934DC3913E1FD7C4696E7714C8CD7681654B2D76A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c1a86a195d0ff278ae5e7b912371f80256cd80a08f0670431573d6404bbd409b
MD5 1e5ba76b03c5808712bd7925e87e15b1
SHA1 9f405b9b810608f26066837dedef7472ebc5a694
SHA512 669b006d21337f13b4f94e4a805ad6e29ab3dc74f651495e251f640c11c4548dcb1f6b994ef25949d513bc3dacfc6ffb61f66a425911100e3ac0aed90b57a535
TLSH
T11B51958D50C18AE5DBC884B085D010A3393AF572C7C39E1B0DA5F57A4F7673322A60DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 27015d5e3e7a589b95f12b86bbf86ad6b0ad171e886494508fbc45d7bbfae9b8
MD5 3c1c3908eab452bb15351e7c57d6d500
SHA1 be5ff2e64e318f39885e5558977c0645c2e12238
SHA512 b44efe96026acb3aa224b10f0177ec75e73b88cd2fab16e99ffc09474bfe3b9f9576c10eca9fa2671441804a39ecbb97b9da3cea0fbf4c127201879ccca0c07c
TLSH
T1E751958D51C18AE5DBD884B085E011A3393AB572C7C39E1B0DA5F57A4F7673722A60DC
MD5 SHA1 SHA512 TLSH

Submit Download

46c8bf94-3ea2-4f67-981c-c1c8944e41e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\46c8bf94-3ea2-4f67-981c-c1c8944e41e3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4619aaf2-ca7a-481b-9749-86a79ca94be9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4619aaf2-ca7a-481b-9749-86a79ca94be9.tmp
Size 3KB
SHA256 c9b97f14dbcfce15488d28c9e168c259a76556c082afc065eadc5e0649fb1bb1
MD5 fa6f4cd47550eaeac28ff954276ad7dc
SHA1 3852e11108a844f3dc01251fe570814347276012
SHA512 afef499e51630d876c8fdb09a090f29ae8501eadae2f7c4e59e9fef7b3b5f0d9a0c123d3a2111ae6d1627bb7f46131389b0f118e87d2ee29fd5f90053256f7ab
TLSH
T1E371DFF7C3E5837E891156F09B147E2BCE1D041A422C3C5689E0AE5FA3F24B0E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

c5f4112b-5c63-4a6e-b853-148295ad5328.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c5f4112b-5c63-4a6e-b853-148295ad5328.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ebeca68f-e0ee-44ce-9df3-ad15b013cfef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ebeca68f-e0ee-44ce-9df3-ad15b013cfef.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c4eda0d7-9dce-46c3-bedb-96eaa142d3b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4eda0d7-9dce-46c3-bedb-96eaa142d3b4.tmp
Size 11KB
SHA256 61113661814b13ed4a31990cebd124351015293f24c47b04e19a66b223452754
MD5 57ed8f01cfb8efa1f597dd85959a1ac6
SHA1 6ad62b88396ff83d37081a240ec27d231f4c9ec8
SHA512 9060977550700421f378775822842015088bc119a9fd3c0b4a7fa7ba4b29598b03ee16edb22f1da8554a80754a014b18fef1322bc743b496e269c4ebb2aa0623
SSDEEP 192:sxRmRPb4/f1svQHRHzzoA8p4T/g6+WNIYEGrUGbIgIJ:sxRmp4/f1svQoy/5Iqs
TLSH
T1C532A715AD28A97B9CCBD21DBA5A7F53D7F95432A0902E48F6FCC61C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d285d303-a2bb-42bb-a9a9-5b395971d05a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d285d303-a2bb-42bb-a9a9-5b395971d05a.tmp
Size 11KB
SHA256 8dfbcdd6323fb074e78b8e7e1111ed829eb061c46a995f2339458296b5a95815
MD5 68fbbff9e8e70c891992f1566e9a76ee
SHA1 a7ffcc84423dbf8ef0d75efca4a23eb028a63ef3
SHA512 75177e53e7acf4a8737a8057dece554c084bca955a7e4e2e8413bf38393dac32f7ac8aa7396986080104e0e8ba57291929465cf93a8bb0fa44923d8d328d4c4a
SSDEEP 192:sxRZRPb4/f1s/QHRHzzoA8p4T/g6+WNIYEGrUGbIgDeJ:sxRZp4/f1s/Qoy/5IqW
TLSH
T1B632A715AD28A97B9CCBD21DBB567F53D7F95432A0902E48B6FCCA1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d611e4b3-7e19-4715-8b07-4a6e5793cd23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d611e4b3-7e19-4715-8b07-4a6e5793cd23.tmp
Size 23KB
SHA256 06a3532f6676b787f5679f05369e89ea4049506ca6e8b382a923ea61c24d89fb
MD5 f6a524ed2c8f4ed7cc9ab3e4031025ae
SHA1 2973ed9262a5966978a8f2d898cc5a5701bed16f
SHA512 3b76b43a7f0817906ad06b52f1b83f8a6660a5deceb33adb5673c63d17def9f539a1f549b2df50cc41e8a3b6458ad2385d42c8e937550ac1027925bac6c0ac93
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXOroJeD:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0V5
TLSH
T18FB2D92B640CCB7E4FC04A9EAC196FD77D9802C79A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

949b56ab-0068-456b-a12b-4cb0d9676bb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\949b56ab-0068-456b-a12b-4cb0d9676bb5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

abfbb425-b5e1-4a8a-8e28-f30abf615c55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abfbb425-b5e1-4a8a-8e28-f30abf615c55.tmp
Size 38KB
SHA256 d7f7ecb87f652cc095eb4664adb557f82a1a9329eab666d3a0244b2827c5dcc0
MD5 0d108a6837983b827c50d5acb59d7ead
SHA1 de0d105f1b0aeee9f0247d3d0dc4e0657042d985
SHA512 6f8fbcb5c0904a019e456a115c099c394a08da5e850adae7309b1eac1a6fb60ce212c3575519c83c7ca0955c09d66a7f108dea1f73d17921f7d25a9e20528274
SSDEEP 768:z/UxvxjgC+W3BXxc7fZrKN1twyp5XSwQs88uBkiTzB/P84g:GZj3+W3BKtrC7ILNBzHg
TLSH
T1F803CF39E8949863ACB39381365B274BAFF06153C0C41AA449EE7A1E02CB75D674B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af3541a9-275a-4c5d-8eb4-22bae85d3014.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af3541a9-275a-4c5d-8eb4-22bae85d3014.tmp
Size 37KB
SHA256 1dcea142913dea5bf96ddf0023b0c921e630bc04e075561ba9d1cf1b62569c39
MD5 6e632fbd7fe8b1e764124d1baa979358
SHA1 cf689ab93d0bd330b408d9dcc4faeb43c6e4d5aa
SHA512 660061fbfb8de96f7ec933626af6a5342dfb1f217019c523e91007119c64ca9750cd04734bbc21ad34a88ed1b0a94888e58ba13aa37c6944f7ebefccb490894c
SSDEEP 768:R/UxvxjgC+W3UbUc7fZrKfp5XSwQs88uBkiTCV/P84g:kZj3+W3UztrMILNBcHg
TLSH
T15F03D039EC846863ACF3A385375A275BAFF06063C4C41B9849EE7A1E038775D6307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbc0467f-d8b8-40af-bf5e-52121ab6e742.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bbc0467f-d8b8-40af-bf5e-52121ab6e742.tmp
Size 36KB
SHA256 f29be0b8787b7dad7d7cd7d405ee6806ed512357ca6f377e7a3b6c39acbcf7bb
MD5 4cd6a84fa4e1269cc574e09add7ef28e
SHA1 5fe181fbf0b97bb51438814024fad7d04701d7b4
SHA512 9f6d386064a41d55d599bcc6dc52aa3ae718ddef49f63cf233134ef486f656bfe702882bf7218c7c3ee7af278694e39c36cfbd7f8f1286252e59352d3b798dcd
SSDEEP 768:WFd/3LwgMd+Dc7fZrKN1twzSp5XSwQs88uBkiT2BE75E7Lt:m/3iZtrCMsILNB8kIp
TLSH
T1B1F2BF36E8C4C877ACB29B81B75A3706AFF09257C4C41790DACEA52D01D769E238BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49e018ff-61d8-4596-8c0a-78e6e3212346.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\49e018ff-61d8-4596-8c0a-78e6e3212346.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download