d74639051f961d6ecaef96ca1f38467cae2d297353a8c12dbbf1bafd609abc5b

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 12:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 5KB
Sample261102-p1kahafb47
SHA256 d74639051f961d6ecaef96ca1f38467cae2d297353a8c12dbbf1bafd609abc5b
MD5 7888f616daec4791366349d8c8ac055a
SHA1 d18dee35cf9300f78d8de8758cd66392ef857169
SHA512 c1a9dc2e15c83aff030f2af2a7a3535d2c23f163ba725681b678371db5f499b7ad4aab9b1614858406f43df04d571a345818afc4adee1d4b35233bcd74e286c1
SSDEEP 96:o4EpR9v2EtM3iC0BpYxpBZqSUnEqi7Y9DXSCxTeDVIumalG0C:o4kR9+EtjC0BpYxpBZNR893xTeDmumam
TLSH
T10DC194116884A96601FE21AF327BF20871FE521176119803B99DDDD93AD0FC7C4A3BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5624	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{62954460-C904-4CA5-BB8D-2816E76D6B6A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe
5076	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 4144	5076	msedge.exe	90
PID 5076 wrote to memory of 2372	5076	msedge.exe	92
PID 5076 wrote to memory of 5624	5076	msedge.exe	93
PID 5076 wrote to memory of 2372	5076	msedge.exe	92
PID 5076 wrote to memory of 2372	5076	msedge.exe	92
PID 5076 wrote to memory of 2064	5076	msedge.exe	94
PID 5076 wrote to memory of 2064	5076	msedge.exe	94
PID 5076 wrote to memory of 2420	5076	msedge.exe	95
PID 5076 wrote to memory of 4152	5076	msedge.exe	96
PID 5076 wrote to memory of 2420	5076	msedge.exe	95
PID 5076 wrote to memory of 2420	5076	msedge.exe	95
PID 5076 wrote to memory of 4152	5076	msedge.exe	96
PID 5076 wrote to memory of 4152	5076	msedge.exe	96
PID 5076 wrote to memory of 1268	5076	msedge.exe	97
PID 5076 wrote to memory of 1268	5076	msedge.exe	97
PID 5076 wrote to memory of 1268	5076	msedge.exe	97
PID 5076 wrote to memory of 1880	5076	msedge.exe	98
PID 5076 wrote to memory of 1880	5076	msedge.exe	98
PID 5076 wrote to memory of 1880	5076	msedge.exe	98
PID 5076 wrote to memory of 5228	5076	msedge.exe	100
PID 5076 wrote to memory of 5228	5076	msedge.exe	100
PID 5076 wrote to memory of 2252	5076	msedge.exe	101
PID 5076 wrote to memory of 2252	5076	msedge.exe	101
PID 5076 wrote to memory of 3184	5076	msedge.exe	103
PID 5076 wrote to memory of 2748	5076	msedge.exe	107
PID 5076 wrote to memory of 4580	5076	msedge.exe	108
PID 5076 wrote to memory of 1340	5076	msedge.exe	109
PID 5076 wrote to memory of 3348	5076	msedge.exe	110
PID 5076 wrote to memory of 3348	5076	msedge.exe	110
PID 5076 wrote to memory of 4280	5076	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d0,0x7ffa0f01c188,0x7ffa0f01c194,0x7ffa0f01c1a0
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,6330038821916906996,6037356481613156892,262144 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,2543079431060251870,7635566402570590704,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,5557273003660675362,1620857104953694806,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:13
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,5923623360249421526,11372208278943953341,2097152 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,11488330905471984216,13466158816388988787,2097152 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,6987044676276876898,13336819378073558803,2097152 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,11314534362341936185,16216146539547344721,2097152 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,3133952599778563567,1825838656133835019,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,14862125750684142056,2106421402345823060,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,15123844440478097411,4098033940299520368,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,15123844440478097411,4098033940299520368,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,2820371650611205324,7471917293171957700,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,1071146214821394010,17312516979001293809,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,3677510948577658966,17288724976170684207,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,8200602435739561163,12053561126032231517,524288 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,12206180358903016001,5927861862343593315,262144 --field-trial-handle=2224,i,17356346952269001058,8555921279548539459,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1ade8add-b4a6-43fa-bb05-5ec3ff5e3a80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ade8add-b4a6-43fa-bb05-5ec3ff5e3a80.tmp
Size 34KB
SHA256 7d7767065b9a44058ace39a2f240ce63e26d7964b0c5205876f37b06f8a00ac9
MD5 be2075101f44c81d8252759722bd4f8e
SHA1 eb16a4a1e63b684c85bd63bb3d58d065ff86f3e5
SHA512 500116838471f496fa7a03abc2324bbc91e23f2db1d086dd3dd09973f629926fbd26f838c7c2d6a6eca7eb6437e990f83e9e34bab54da9a082519a4bcf7db725
SSDEEP 768:JN3hdNBtNK3O0ituM1h3Yogkl5akl8pbHW0AWD0E75EpLF:JN3P/R1h3Yog05akl4bHW0AVk6B
TLSH
T189F2AE72E8659E774EE6E644B21A3213BFF4D1179AD84A80D4DD9E0D01872AE138FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d9b58bc-63f8-4eb6-9624-4dbc20b02260.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2d9b58bc-63f8-4eb6-9624-4dbc20b02260.tmp
Size 34KB
SHA256 f2af2594f172869c1dd9cd0dfc1770aba624f4aba32cce96bebd9afe04e9cc78
MD5 bfa9ae90180f8101f3a3560bc064c789
SHA1 a3112e3ef3c528c5726b7f2d428ccb37873adcab
SHA512 343175cc8d3f16363d931192a95b59035389a074c761fda14db96d285209a35f90b1c907ef283696fd87d24ec504dea548bfca500b278a9e978be260e5138b6a
SSDEEP 768:8N3+dNBtNK3O0ituM1h3Yogkl5akl8pbHW0AWD0E75EpLF:8N3m/R1h3Yog05akl4bHW0AVk6B
TLSH
T104F2AE71EC659E774EE6E644B21A3613BFF4D1179AD84B80D4CD9E0D01872AE134FC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94310259-e593-41fd-ad97-89cf4a6be81d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94310259-e593-41fd-ad97-89cf4a6be81d.tmp
Size 40KB
SHA256 4f8ef364544fe305f4fb0c7a03d5b5d98a61518dda53dd34cf07294f8e62dda3
MD5 8c6c9c0cd4f8d96c79c3a407631384a9
SHA1 f2729936450379f243f311d59592e46fa4a61909
SHA512 bdc54c5b003ad4f37efb04b5d456127b586053895302a307637762fd49646152d8b74d698d3181855c35c7e04dd42268ab6466fce4141bd75529a3d99ac3903b
SSDEEP 768:X/UxvxjgC+B36NBkNK3O0ituK1h3Yogkl5akl8pbHW0AWD0E75ESo:KZj3+B36/A1h3Yog05akl4bHW0AVkDo
TLSH
T19203CF36EC69AE374EE6E644721A6317FFF4942366C85A8498DC9F0D02872ED034FC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

44d25637-15cd-4dc7-b737-553c44259193.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44d25637-15cd-4dc7-b737-553c44259193.tmp
Size 23KB
SHA256 8bf88d12bf61dd14677e01bf65c35036f71769703419e3aa825ec9709a8ab85e
MD5 f6fc2872f302c5a6e2d267d43cf9fece
SHA1 b3ab8f474963b621019dd22751d68da6c77b65b5
SHA512 c8bbaf60941da55b9f0577681bbf1c1b91d60f339e71e857113ff3aa78f36692735e416d72e11b62d2b13d676ce0579b091507d25636adb2816a5145b9035547
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLiroKrJ:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0V7
TLSH
T196B2FB2B604DCB7E4FC01A9DAC196FDB6D9802C796588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8f9daa4c1318bee79bb0839080deeadf5e6be8aecd4a7db7f41dd5d1f636d816
MD5 3b338749d2d2f9425a92d75e9836dbd7
SHA1 36718d018fbeb7ba639fec8605099be7acd2446f
SHA512 0964fddcc1b69b2765b10320460e0df99a2b7ec29a6ef9b1e926829e4e0ea65c1feae5658af17c6bbbfbda3191fcc79b91f836779b59a815d4c2739062f5b0ee
TLSH
T12971DA70B373C60AF75C357640CCC99A367698ADAEF34F15A39A90B4B6C6B6185C0788
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 79339328d360be58cdda55eab3c4c77414899b2e258ad7016b2c4d31db6c8d93
MD5 6cbe7407459e10134f96f16d42405796
SHA1 060d532fe1a56266c92b581e16cca0123b8bc265
SHA512 a37a6c3da4bf84f0fb6130cf22aab2c0985a7c674babd7cafdb4181f42bd4e8f88c477db6deb41ca5aa742ae23d447783472fb8f94a4e36e1b57ab5ca7b2dffd
TLSH
T1A871DB70B373C609F75C357644CCC99A3676989DAEF34F15A39A80B4B6C6B6185C0388
MD5 SHA1 SHA512 TLSH

Submit Download

c7b6361f-5faf-4840-831a-dc4c5494fdb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c7b6361f-5faf-4840-831a-dc4c5494fdb1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62f9b461-606d-4d3e-b162-be3bf891b211.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\62f9b461-606d-4d3e-b162-be3bf891b211.tmp
Size 1KB
SHA256 b23398ab95832a7345ebebd8eb0e01d6722445d640b1894d26fc11b8ce96ef4b
MD5 b40cd2b4591feb3e3b25b2081ccfb22e
SHA1 34d3ace702d06dc650c2c17d1d778f628d3112ad
SHA512 dce4ee1cc82ea699c0af4ca1ef8ed70d59566a295af842534f9b8b8fff3c181be77eaa5ba9f3ef8673c90c48119082ec23fe4faf1d8c406919d095a8b2f8b997
TLSH
T18941A1F783B4857EDA1196F0AA14AE1FCE1D0515436C7C65C9E0AE2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

71222ee6-c7f6-433a-a609-e494f4a62402.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\71222ee6-c7f6-433a-a609-e494f4a62402.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a5fce33a-880c-4724-98bd-2baf047e998e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a5fce33a-880c-4724-98bd-2baf047e998e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

d58d4c45-e274-4f8c-bdda-2715bec2f9e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d58d4c45-e274-4f8c-bdda-2715bec2f9e2.tmp
Size 11KB
SHA256 221409b3f6b7b73cd04a92d7017588fa1bc2a2c1b71b1450b4a4e6b728f8a599
MD5 0904af607cd4ce2150798d794ca7d2b4
SHA1 b5e9303165760cf9de90f3a83b4b14baf583ab7c
SHA512 215018dd5c11983f6b697a32c267c1da5d840134ac10ec80bdffc2bab58d9e0062dc5b4cc1772e295e16f4b323ba95aa8b37c6fb22d4129f96df05d54386612f
SSDEEP 192:sxRMkRkbQ/fBsJwqmBPzoA8p4q/g6+WNIYd6eOG8tIgIJ:sxRdMQ/fBsJwHBmP/5ILs
TLSH
T11C32A616AE28A93B9CCBE21DBB657F53D7F95032A1D51E04F6FC861C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3ab389c-4d34-4025-b626-888bca4b4345.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3ab389c-4d34-4025-b626-888bca4b4345.tmp
Size 11KB
SHA256 f55157f7ece6d2fb8d12b37fd1b96e557c30d87abb5a1ffd56a402ec7301af1b
MD5 857ebdf06f7b338305cb667ec0b3b0dc
SHA1 d493b9917d46092846337b5ff82d2efed5c737ca
SHA512 22168c94247f0076bf3f0f7f84fe53f517daa24ff41f95b635c9d3a44e974b20861a34bd7c0f3549502405eb6b561e8dfaed631d5c8799462c582511ded5d740
SSDEEP 192:sxRMLRkbQ/fBs/wqmBPzoA8p4q/g6+WNIYd6eOG8tIgDZJ:sxR+MQ/fBs/wHBmP/5ILv
TLSH
T16132A616AE28A93B5CCBE21DBB567F53D7F91032A0D51F44B6FC861C04EA6DD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efb7b79a-1e42-4008-a50e-b3446f6e611b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efb7b79a-1e42-4008-a50e-b3446f6e611b.tmp
Size 11KB
SHA256 a1b2fb5a25a2f8882654e550a9e7f53ed975a919c40a1fcdad7ecfa5d3128e25
MD5 4932b085c4e26ccb571fa2caf03fd0c2
SHA1 35588c0b67c2997d83380472c3ca30b6e10027ea
SHA512 6c78bef2b740caab095200968cc8a0111b12ad0b95ddfcdccd79710ee88525b48d8ab46e8ff39e1ddcad6949b32b771af5f1f862f8f0100899d60b1a6d5fd9e0
SSDEEP 192:sxRMLRkbQ/fBsIwqmBPzoA8p4q/g6+WNIYdVuOG8tIgD/J:sxR+MQ/fBsIwHBmP/5I2d
TLSH
T13032B716AE28A93B5CCBE60DBB567F53E7F9503260D51F04A6FC861C14EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e6ed5855-9e8e-4dfc-9f3d-f6193beab363.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e6ed5855-9e8e-4dfc-9f3d-f6193beab363.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d947cde62dd03888b41c5db5e5213fdb1b3bf05f9b1cfe83bdef9726514845ce
MD5 4def31e298c81a5b9599fd9e96f81a43
SHA1 dee2cc205dabb6ae563f80bdf9fa28db8d1c54dd
SHA512 ed4f8b0e9fd541598fe2ac9e20bc45fb8678613afeefba5a3844f627311df5cbe6d72e7c9378a6fc3ab80e6d0d769ae1b68638c0e31bd228f10ed75ec2aa064d
SSDEEP 768:B/UxvxjgC+CZ3cWK3O0it31h3Yogkl5akl8pbHW0AWT6SHvP0Vv:UZj3+I3F1h3Yog05akl4bHW0AHSCv
TLSH
T1DD03CF3AEC65AD778DE6A284761AA307FFF494635AC4569445DCAF0D028B3AD030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a19396ad-8be2-459c-bdd7-5dad9e9c4bbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a19396ad-8be2-459c-bdd7-5dad9e9c4bbf.tmp
Size 36KB
SHA256 c8091934b8aaf36de8c93e00c8511646c292dd1f3c9e2889909d960a31e14a63
MD5 93eff56d579a6836979a56459d58305c
SHA1 99715cc4a619f866a89fc03ff059dc7b0ab4052f
SHA512 4aa80038886dad37b5ae877b125728368ffd5ab8a0df486d645c17411f77a2c26c33548722a6d40c6af52eab0f5510405af4b5466788fefc21e12766b6c8fe72
SSDEEP 768:NFdb3pwgHdNBtNK3O0itu21h3Yogkl5akl8pbHW0AWD0E75EpLF:5b3V/n1h3Yog05akl4bHW0AVk6B
TLSH
T1A2F2AE72DC94DA7B5EE6DB44B21A3213FFF091679AD89A80E5CD9E0C01871DE038BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad2393fa-2912-42df-9ed4-d9157dda3647.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad2393fa-2912-42df-9ed4-d9157dda3647.tmp
Size 38KB
SHA256 566371018ed9821332478609bb2e41e0745ed6f959aae39acffdcd7854330d2f
MD5 0656b460cc5aa7a20dd3eecb97914029
SHA1 368421eddb2e87f878ca536b8a76bd20a6adf0ac
SHA512 909595f4efe7ff9de10da2eb6f3b86a80143fccb2a6ea5c73a18e4aac165c01390382bb7c6c7f1c32d40490b338bcb1ee644b8198dd590234bae13ea5a0b55d7
SSDEEP 768:u/UxvxjgC+CZ3jbK3O0ituZ1h3Yogkl5akl8pbHW0AWi0SHvP0Vv:jZj3+I3w1h3Yog05akl4bHW0AaSCv
TLSH
T15803C036EC65AD778EE6E284721AA307FFF4956396C45A9454DCAF0D028B3AD030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c098ed7d-2b42-488e-842f-9281a480d8ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c098ed7d-2b42-488e-842f-9281a480d8ca.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download