3169249454804e6b45d21a08d459dacaf509e1455d3530bac7045f703087ee03

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 129KB
Sample261102-pgcfjsvz5r
SHA256 3169249454804e6b45d21a08d459dacaf509e1455d3530bac7045f703087ee03
MD5 c79190c71657f7ae3c46f336535e2d1f
SHA1 6f309b297c21acb3f63ac92c5cc112593961c3a3
SHA512 949130acfa9ae8ebafb6624daac7eaf5a76440f38c32b545eb1544b9a6f6f6c14140e481993056273576d5fa5ae2b61f1d9e31a6252742a1bca04e8b650e9349
SSDEEP 3072:dzyXjVOYQbXGx+vPQPJJQP6BQP/mew/bQPNlQPBVQPyKQP+HQPhFCk9QPFgHWAM+:uQbouN/mewOyqG3hFCkcF9A6I6E5
TLSH
T1A9D34220516B746B0337F2C5B9A69B19B0D7A12DCE231E00B7BC176E5FDBC50EB2244A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{AF3272E9-7B38-4B99-AA18-0441C0135E34}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 800	2536	msedge.exe	86
PID 2536 wrote to memory of 4116	2536	msedge.exe	87
PID 2536 wrote to memory of 4424	2536	msedge.exe	88
PID 2536 wrote to memory of 4424	2536	msedge.exe	88
PID 2536 wrote to memory of 4424	2536	msedge.exe	88
PID 2536 wrote to memory of 2244	2536	msedge.exe	89
PID 2536 wrote to memory of 2244	2536	msedge.exe	89
PID 2536 wrote to memory of 1772	2536	msedge.exe	91
PID 2536 wrote to memory of 1772	2536	msedge.exe	91
PID 2536 wrote to memory of 1772	2536	msedge.exe	91
PID 2536 wrote to memory of 2656	2536	msedge.exe	92
PID 2536 wrote to memory of 2656	2536	msedge.exe	92
PID 2536 wrote to memory of 2656	2536	msedge.exe	92
PID 2536 wrote to memory of 3484	2536	msedge.exe	93
PID 2536 wrote to memory of 3300	2536	msedge.exe	94
PID 2536 wrote to memory of 3484	2536	msedge.exe	93
PID 2536 wrote to memory of 3484	2536	msedge.exe	93
PID 2536 wrote to memory of 3300	2536	msedge.exe	94
PID 2536 wrote to memory of 3300	2536	msedge.exe	94
PID 2536 wrote to memory of 1524	2536	msedge.exe	98
PID 2536 wrote to memory of 2260	2536	msedge.exe	99
PID 2536 wrote to memory of 1524	2536	msedge.exe	98
PID 2536 wrote to memory of 2260	2536	msedge.exe	99
PID 2536 wrote to memory of 1860	2536	msedge.exe	101
PID 2536 wrote to memory of 1392	2536	msedge.exe	110
PID 2536 wrote to memory of 2612	2536	msedge.exe	111
PID 2536 wrote to memory of 2176	2536	msedge.exe	112
PID 2536 wrote to memory of 3784	2536	msedge.exe	114
PID 2536 wrote to memory of 3784	2536	msedge.exe	114
PID 2536 wrote to memory of 3796	2536	msedge.exe	115
PID 2536 wrote to memory of 3796	2536	msedge.exe	115
PID 2536 wrote to memory of 1132	2536	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff88090c188,0x7ff88090c194,0x7ff88090c1a0
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,17669744205351409783,17239713190169203555,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1161874571068881173,14448253356326202452,262144 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,8839099339540211196,2483266268209605286,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,6869218258366073702,3818453766274607983,2097152 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,17223196058545677255,2072469666681297178,2097152 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,15444191281242001986,16649559703543848890,2097152 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,1921104111312198921,2775615306269018908,2097152 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,15103720017506588865,13308040486042509605,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9150611090978850818,10889309914517118335,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,12345067500513153803,11016946199657597859,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,12345067500513153803,11016946199657597859,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,6286356304409608892,10960123595076883794,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,5084891996106218620,9228830611561649566,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,17981268692037635190,6581581192592056585,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,3417057822713337646,3743630798215050627,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,15512523337751171388,378245690585829703,524288 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5320,i,12938914855121275710,4412019988259733464,262144 --field-trial-handle=2024,i,17898879346503257782,8963495301043705540,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

03e54c4a-715c-490f-a82b-41824d0c5bfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03e54c4a-715c-490f-a82b-41824d0c5bfe.tmp
Size 18KB
SHA256 eaa1d4ce4218c562b065f487f5c5cb1288da7ed0c3f6fe8ad560bbdcbbf91036
MD5 a0509a9e7a5e00bde3928f4ed1452352
SHA1 bfd3939b45f4730ba10c669631e0198897f2e30b
SHA512 fdac2df306172d83bc3303808cdb57590a1eb26d415181da2f81eda85601446e66a1a64f8ba6d598526cd80fb9774420876d5a136d768a8ce3dfa051bffb4c91
SSDEEP 384:9QkUSv0sN6BLhQ41yCbuzIGmXB8oMcXwiQH7vBEDXgIIlD:n0a4JUEnM0wiQH75EDXgLB
TLSH
T119827D32AC79AC6B4EA39514F00A3A57EE74911BD6C81F50D9EC9F1D01DF29C134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07eea493-df5b-46e6-a382-c67a326906fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\07eea493-df5b-46e6-a382-c67a326906fa.tmp
Size 8KB
SHA256 f601d68f80ca23180fdbe431f6bb30d9312aaea7b27c906ae35c673183253f19
MD5 f056e6c5dd723d4d61968cbc9e337870
SHA1 985a115cde3278634335b7ba1303a1a740e931fb
SHA512 ed7ba6ef28a4e32ce1e5bf3fcf680f3ecb494688eb1ca03331ba59c83a4863bd321d7daf2a44b08dd958b24ad04e596654b218a50c41b1ff5d13550f87633738
SSDEEP 192:yOND6IECQmiUyRjTOuIGmXNjzorvRa0/cX/eUP927HYq6U6:yOND6D+uOuIGmXB8oMcXyHQU6
TLSH
T10C121B32E878BC6B5FD3A844B4473613AEA5412BD6896F50D6EC6F1C01EF25C134A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d0c682e-c829-4fd5-a4d4-10ad967cdf69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d0c682e-c829-4fd5-a4d4-10ad967cdf69.tmp
Size 8KB
SHA256 777e5a2e26075b9522bc9f68a381ef8f854798e5b42684e1adf38ae4e85b7dda
MD5 bbe27909f2a4976faeb2f4ab94684ee2
SHA1 8d51398cd5731e6c75b76f2c6ffc34e1535d0bda
SHA512 241b78f4aeeb7b397cf7762d0787a6c835814d903fc01360fe7946de502846743d229eaffd87ce9250218fa2a60b354c0aea1fb2aadeed393874914fd62f2976
SSDEEP 192:aONW6IE7QmiUyGjTPuIGmXNjzorvRa0UC7sfVU6:aONW6DtjPuIGmXB8oesdU6
TLSH
T13C02FB35AC787C6B9FF3AD09B4863B23AFA5102BD6951F44DAE81F1D00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b5fb7b6-417d-476e-8fe4-ceb5109ba55b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b5fb7b6-417d-476e-8fe4-ceb5109ba55b.tmp
Size 18KB
SHA256 47c64098f2d686973605a6a0d9586a85af13ea67295cf536f4bd21a1dc8f8255
MD5 e21cad66946e4fcf10eb62a010c32942
SHA1 f6a03482dfb0dbff2812336322816bd69b9d92ff
SHA512 532d163ec49f34421a7939fa706446901922074601061dc4c4e2495cd79f4ed6e055edad0f734702e0cbabf073df55ec0b102628979dab2c0d70f53809714cee
SSDEEP 384:zQkUSv0sN6aLhQ41yCbuzIGmXB8oMcXwiQH7vBEDXgIIlD:d0F4JUEnM0wiQH75EDXgLB
TLSH
T1AE826D32A8B9AC6B4EA39514F00A3A57EE74911BD6C81F50D9EC9F1D01DF29C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

771d403b-cf55-4a75-8778-25759a7b79bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\771d403b-cf55-4a75-8778-25759a7b79bb.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

6c20803d-1b1d-4f10-8f95-f86724b955dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c20803d-1b1d-4f10-8f95-f86724b955dd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93911bfb-3634-4ca3-8e08-763e285bdfd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93911bfb-3634-4ca3-8e08-763e285bdfd8.tmp
Size 9KB
SHA256 1d11106fa048ee371979e6fd7a986dad303fd0c974a1c11a89d18d72d28b31c7
MD5 b5e4cc7f7bd8a643dbac22b80a22275a
SHA1 c510e8dcef64a3336885558c8da2f73dc8515241
SHA512 c57f0b1fd0143ad5a057e16f6997c769f57abea9e75cd5322b95a2fa1077ab9899872c0982c265eba99b6d2aa54cbe59a189456f8fe039b14a916b85d7e6ad17
SSDEEP 192:sxZfRiWj/fwsii73Idpd+HW6+WNGYaplXDcIg5GJ:sxZfzj/fwsLcIHbGw4
TLSH
T15E22A7226E28A97B8CC7D21DBA65BF13D6F9503291D41E48EAFCC61C05E67CD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8f7395d835ac8079f6784510a050cf0244ec321fdac351971512e1007e82039d
MD5 a567ee27b66f5e68b7a5aa9ebff023cb
SHA1 1dd62ddeade6ab9713a1d3048385c1fc1dcaad2d
SHA512 dbbf81612f84d66d819a19054d133a624c36d92a57939083a5f6896831eca0118dbbf0fefb5d599e7eb3c763e73319a524014d4ab468381025d4cc88f7247a3e
TLSH
T186E026C654C8C23EB748648701F89B4CC280379B93C47A4E1B85E88D70C1140A3877A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 bf4d9d0883c2f6d5d618923cf05db4b3eb4dc6c48d1f1c5830b177321a8489b2
MD5 5e438a9d8dd7e992b3e92410b7648fac
SHA1 716a5c9b5406fefb4b67a91689a6b90f71ebb529
SHA512 b3df16f66d1fb23237c5915168ab1fd926f89caaa92c697334152be2a515bc1343b9f6725ad1961f54319d5ea64498e55c1b51acef2f454e3e29543bd02a7aa4
TLSH
T1C5618FC40640C06AF7E84170B5D6488F3EF7E5BCD2B34EE214A8E97AAB0761240C0E7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 30a1edd360fe8225c0d50be06b2dda4815f5341789245870b6456f47243d8e8a
MD5 6ae53c5c7573a93c33d8666762de44e6
SHA1 b2f83835c3e2ee183bbb62ebe1c9cc8680fd37d8
SHA512 8d523732661cfe7e0a92ae37ec521ae9f5aecf17af28f79b64c9a02e6aeff431415249fe448277cadddbbc21f90f7720d32175d318011997968c0089b543201a
TLSH
T1586180C40640C06AF7E84070B5D6484F3DF7E5BCD1B34EE614A8D976AB0761240C0E3A
MD5 SHA1 SHA512 TLSH

Submit Download

d93a8ce0-7228-4e28-90c1-7b7eb11019a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d93a8ce0-7228-4e28-90c1-7b7eb11019a2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

978b50f5-02a3-470f-b598-5f74cb336a90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\978b50f5-02a3-470f-b598-5f74cb336a90.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cba41b62-147e-437c-961c-d1152d688831.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cba41b62-147e-437c-961c-d1152d688831.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d87488d4-4fdc-42cc-9847-6a59ebe9b024.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d87488d4-4fdc-42cc-9847-6a59ebe9b024.tmp
Size 1KB
SHA256 6ac25d6fd54f928c75853ebbd4bee7e50ee30b5938cd1391cef81e2acabf8a17
MD5 e3070ad95ea4a1777ceb46e611e57bdb
SHA1 7f18bbfec09db81d43a336f739f4fb49aa5d141d
SHA512 7076bf47f8b6ecce95c907f00a1f4ce1a068f8a402bbb7da8408da5a89dc27fe6397ff257dfb83de2491906da0407942ea296a36051a8cf413b36db482c6fd98
TLSH
T165219EF783E086AECA0156F09A14AE1BCE1D0516422C3C1589E4AF2793F3075D00265F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 77cb2b4273be76b44533e83c8c1189c38af8a43eafed5fe8733a069dce1fe014
MD5 efd83417ff7613f8cadde95564317448
SHA1 6503a3fb101f564cfd72d36d083f9db9015c92a0
SHA512 51bf06599df4e024265aa0984f0c598a3ea89b4a97ebd6fd64883fd3a1939f3967e8adb3532c91997e067a8c11e162afa38dee6196b0bef12c57951e9473903b
SSDEEP 192:sxZfRiWj/fwsiN73IdpH+HW6+WNGYap96DcIg5sJ:sxZfzj/fwsEceHbGDi
TLSH
T1CE22B8226E28697B8CC7D25DBA25BF13E6F9503291D41E48AAFCCA1C05E77CD124740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 135ff190fcd911f2a47da386d33003f1899a299081caa8a241d89fff2758cdaf
MD5 f00464ae5bad5c5b2d784fd753b2d05f
SHA1 69c6a94a88d66cdee0ddae3a76c274d599ffd52a
SHA512 f56907260fb375af9281762c03fe7866288735c433ff0f128058ef9da59fcbb9c6a4136103d84724c37d32453dacaf4c7d0c02a7a60e00b6ab0784e9da4f4928
SSDEEP 24:KYuhuIcIRKqh41aSrclyXytWRktI/KBhK1eSEgyOhO4sIlKqh012SbANyXOVGW:KAfIRKc4MjyJaI/KnKg/zIlKc0Yrye
TLSH
T1C7915502716A120039BE29185579C61E964172F33066F66F3FFC84A65E7BF580DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b409a861-e0df-4090-b4cc-0a9b6cc95bc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b409a861-e0df-4090-b4cc-0a9b6cc95bc5.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d3f68f83-05b9-4d49-9c4f-948decef166a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3f68f83-05b9-4d49-9c4f-948decef166a.tmp
Size 27KB
SHA256 78d17a7eb8b2419e6de0cac776664d3a0aa4691e1f46779fb16d771e1954551e
MD5 d9aeb2dddf7b407e78895c21dc7ee6b7
SHA1 9c1a6600df9c9a5db4a0d47dd6f0cb3410b4121a
SHA512 887746c184b8edee0995f2c9ca4e0beefe5ee8557ad35860a078fb1d8544cd989f43c9db5bb6f565ab791590f60b19ebbc26d6c7277d1da0d34e49a9a05efb24
SSDEEP 768:EgWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Xro4kfeDmRJ:EgWPcLKWvKeEeu1jaClLiF7E4kWDmRJ
TLSH
T1FBC2FA3B644CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d80ed100-bed8-456d-adc4-78d27d377539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d80ed100-bed8-456d-adc4-78d27d377539.tmp
Size 9KB
SHA256 d0918a16ce2afb34672e6186e4b330c04a0f64bb2b7dc6b8eca59f18f4a29fd9
MD5 8355cf46e8967948bd1256fce9a2c804
SHA1 b4d4e7c12cd2d03c0d0a9f74d1ebeaf85378502f
SHA512 19771ce02dee023aaa0cec1a97862320adfdc97c5b084e193dad05294028075a0300633761cd0b02ad13e3197b3ea7d17702b8508530a7b0c1d9a389742214b2
SSDEEP 192:sxZfRiWj/fwsbi73Idpd+HW6+WNGYaplXDcIgrJ:sxZfzj/fws2cIHbGw9
TLSH
T1E52297126E28A97B8CC7D21DBA25BF53D6F9503291D41E48EAFCC61C05E67DD224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df6379fd-a0eb-444d-9ea3-c4d15258cf64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df6379fd-a0eb-444d-9ea3-c4d15258cf64.tmp
Size 10KB
SHA256 7f55b7c11fed8692b3baa35c5d159e60d966d91132739031849643b73d745765
MD5 9a524f76f5a341fb7c8e0ef7b1076fd2
SHA1 5b0b518f01bce10566fe5a20c99b5ff233a40624
SHA512 6ca2e136ca28f977ae5466fa5dc74e37059661e418a749c833f035bd7196158253f5a6051671d3ef7ae652303ae05a1c2d14c6b155e03fab3238bebc3522920d
SSDEEP 192:sxZfRiWj/fwsiN73Idpd+HW6+WNGYapmJDcIg5sJ:sxZfzj/fwsEcIHbGzi
TLSH
T1F122B8226E28697B9CC7D25DBA25BF13E6F9503290D41E48A6FCCA1C05E77CD124740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ff82ee0-05ce-45e0-a2c5-aacde510ea8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1ff82ee0-05ce-45e0-a2c5-aacde510ea8d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d13b33ec-d973-401c-9292-3380ebe5455f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d13b33ec-d973-401c-9292-3380ebe5455f.tmp
Size 21KB
SHA256 322558c18d999305d83141ff915ee00b8eb14e5c81656055db0898a05d4430b4
MD5 943cfbd40b4c7dc07b6cf0356aa3198e
SHA1 71791c640f85f6ea1c3e8404a87224148e54f17b
SHA512 6c88e16abc4f882c409e3be3bf502da6a7a712bc7fc7f67dda4224c2f39ab1a3340c5c040254f72fc9d54af9de3fc088d38b36140a18e9045e65c0c392e3db4a
SSDEEP 384:JiFzQkUSv5zsNC8TUNTUlIlBLhQ41yCbuzIGmXB8oMcXBBiQH7vBEDXgIIlD:gFd5Xwgy4JUEnM0BBiQH75EDXgLB
TLSH
T111A26B3398A89D7F9EB39A44F10A3613DEB49167C5C4AB50EADC9E1C01DB28C134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c575682b-1057-400c-b6b9-ff33f0ad164e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c575682b-1057-400c-b6b9-ff33f0ad164e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b367649f716be2f4c078bc87d8996c1905f61dad417b5bb40781cecaf4c6986e
MD5 2859e031dd439bdf6f39467623343221
SHA1 0620d8bee041dab26df32f5a9b675f5dedfd7edc
SHA512 baaed823685fbd6deb23d6eede58b0b904ef114187276f900f079ae2f49c85c833b6142fe66ecfec66c06d67fdd249e628c13e75bbcd9d5451b359c501e1fd41
TLSH
T136411C58A6EE1148B3B7AE1A5BF6A86E487E7C372F06D45D10110E4E0B76A40CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download