9cba45dbf133aea21dcd3ad6b123f4b269ddf3d18a60b75bd6dc67ab9b44b242

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1023B
Sample261102-plw1rafb22
SHA256 9cba45dbf133aea21dcd3ad6b123f4b269ddf3d18a60b75bd6dc67ab9b44b242
MD5 4aee88533d223efc07e52925c07c0a1e
SHA1 ffe593eb21e1de834b2ac948792e6b601847715b
SHA512 cce48c2b11c5cafb5da0d254bd7f06b79ea55b32116301644e3d9e0ba2b99335da28aee948af9152c3c8604c4dc56a7d0120bf64b549a496e53cb58769177716
TLSH
T1AD110E0388E19E28D0128504CAEAF1040A48E077C68998F9B4DE656ECFC6FC545EB36D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3252	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{CC56E64C-1E1A-4DCA-8BD0-89DE28C0FC2E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1660	msedge.exe
1660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4720 wrote to memory of 4192	4720	msedge.exe	85
PID 4720 wrote to memory of 3252	4720	msedge.exe	86
PID 4720 wrote to memory of 1072	4720	msedge.exe	87
PID 4720 wrote to memory of 1072	4720	msedge.exe	87
PID 4720 wrote to memory of 1072	4720	msedge.exe	87
PID 4720 wrote to memory of 3392	4720	msedge.exe	89
PID 4720 wrote to memory of 3392	4720	msedge.exe	89
PID 4720 wrote to memory of 4184	4720	msedge.exe	90
PID 4720 wrote to memory of 4184	4720	msedge.exe	90
PID 4720 wrote to memory of 2132	4720	msedge.exe	91
PID 4720 wrote to memory of 4184	4720	msedge.exe	90
PID 4720 wrote to memory of 2132	4720	msedge.exe	91
PID 4720 wrote to memory of 2132	4720	msedge.exe	91
PID 4720 wrote to memory of 2948	4720	msedge.exe	92
PID 4720 wrote to memory of 2948	4720	msedge.exe	92
PID 4720 wrote to memory of 2948	4720	msedge.exe	92
PID 4720 wrote to memory of 1848	4720	msedge.exe	93
PID 4720 wrote to memory of 1848	4720	msedge.exe	93
PID 4720 wrote to memory of 1848	4720	msedge.exe	93
PID 4720 wrote to memory of 3772	4720	msedge.exe	99
PID 4720 wrote to memory of 4888	4720	msedge.exe	100
PID 4720 wrote to memory of 3772	4720	msedge.exe	99
PID 4720 wrote to memory of 4888	4720	msedge.exe	100
PID 4720 wrote to memory of 4848	4720	msedge.exe	102
PID 4720 wrote to memory of 1348	4720	msedge.exe	111
PID 4720 wrote to memory of 4008	4720	msedge.exe	112
PID 4720 wrote to memory of 684	4720	msedge.exe	113
PID 4720 wrote to memory of 3000	4720	msedge.exe	115
PID 4720 wrote to memory of 3000	4720	msedge.exe	115
PID 4720 wrote to memory of 3440	4720	msedge.exe	116
PID 4720 wrote to memory of 3440	4720	msedge.exe	116
PID 4720 wrote to memory of 1772	4720	msedge.exe	117
PID 4720 wrote to memory of 1772	4720	msedge.exe	117
PID 4720 wrote to memory of 1660	4720	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd40dec188,0x7ffd40dec194,0x7ffd40dec1a0
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,8060856285998480439,14274727654767648556,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,16958604158228585211,9407986935511741476,262144 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,963523027493976877,7437592720880994931,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,13283261244451100177,8595894191872196237,2097152 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,878749763689144211,16829832954227781906,2097152 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,14562553423480578903,2424687303248827778,2097152 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,3573454141049083568,15888835935020829612,2097152 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,13569947337971262543,13561049444418703345,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,18018991386477048793,1968439291763687562,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,14665252214791928135,13764275268770081855,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,14665252214791928135,13764275268770081855,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,7100117727393724456,6763345019064284487,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,5487432455298787568,9030385110499384471,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,152684803716423645,2172618881780973373,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,3283726871656121286,2198663152568358400,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,10893709560282237637,5596022175226869819,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,2184832342455010775,1133360162267962203,524288 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6324,i,2554620802477929176,10912962519193894372,262144 --field-trial-handle=2244,i,10248562999540942655,17130763539573247935,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0bba0b3d-ccf1-4c82-abc4-eec8fdc1e7e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0bba0b3d-ccf1-4c82-abc4-eec8fdc1e7e5.tmp
Size 8KB
SHA256 6407b6cbd22813662e094a428f721d7aae325e456a2cc9e4b38b473a99b77889
MD5 5e467cfdc9dfa5703d392c7e2e0d7169
SHA1 796540816b797adb301ea5f87e4cd952fa061c99
SHA512 81f33440a26ad7849017257182d862d714df00b6a5be166d213e51062eec538e17f5cd25fa9cfd63cd86f77f4722eae0810addad96b8a5fe1c984f6814bd9714
SSDEEP 192:KONG6y9uQmiUy3M9tOCTVg7EcOysQKjm+2e03UQqZU6:KONG6T3HOCTVbcOysQKjm+2e57U6
TLSH
T1AC1219367C685C775DD2A540F48B32179FA84167DA8A7F90D0EC2F1C05DBA6C234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

165be112-79f8-4bb2-8443-a8b526977c96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\165be112-79f8-4bb2-8443-a8b526977c96.tmp
Size 21KB
SHA256 713beb3a019c94e08e00a3b21ee230c7986db0199c5ebba0add60799c145ae46
MD5 c4b025519385614cf2ac24826a6a0f40
SHA1 610b0d5defaffe7261232c082055f954118a1a9d
SHA512 e80cca30a7baf80e30893dd5bc337bd6c2ef064f3ed0be85d48fe9e59eb14421162859e0b7b7af52bfa9f217bd499269b97e411ab1b3fe45c5ee1a359d37f789
SSDEEP 384:fiFzQkUSvfzsN18TUNTUlIlrwjQP1OjTVbcOysQKjm+2eC7H7vBEX/IIlV:qFdbEwgtonSOFjmlT7H75EPLP
TLSH
T15DA26B729C688D7B9DE39B00E14E3253DFB481A7C8956B90E6DE9E1C00CB5DC238BD61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a37a6f9-ea80-4486-b41a-3c571d7ddfd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a37a6f9-ea80-4486-b41a-3c571d7ddfd4.tmp
Size 18KB
SHA256 874f0371c7b9da03a0e3e88c8be253f8ca729d8f510eb5af8e6c74c78dc55014
MD5 d46751b8dd1943cb7ca08e8fa2c93259
SHA1 afa50d0c9c463525d4a9f90989e04df1f99113e4
SHA512 233cf55e75508bee9bf43617f7fad2bebe0e8eaa41db100c038b30d28326025bc8d3e093bb8da9001030099909b441a6616e9d55c27d5ed019ce8c009f9da913
SSDEEP 384:kQkUSv0sN0UrwjQP1OjTVbcOysQKjm+2eI7H7vBEX/IIlV:U0oonSOFjmlz7H75EPLP
TLSH
T1D1827C71AC781C7759E3A200E14E3653EFB89557D9D92B90D4DE9F1C00CA6AC338BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00aee304-fb39-420c-994d-f4df84092ea6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\00aee304-fb39-420c-994d-f4df84092ea6.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

0d454c16-cf27-401e-b4c8-fe1c3dbaef22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d454c16-cf27-401e-b4c8-fe1c3dbaef22.tmp
Size 9KB
SHA256 33ce605524d59dad170297ca7f4d7562fa5b993685b42e807e79070a82dd5eac
MD5 242770bbd7bdf5af42f7615fdec02b75
SHA1 a7f4d2bc072fbf53a2e2b2f5cca2e4ec8ceb1b3a
SHA512 6f0cdd7e0899f55a9f9a0709fee869a7a600cc5b820ea7f19dbe37ff0f3d1c32addcce2a95b07e333bf6989ec203c16a930005106e052086fcff9042f330d1e6
SSDEEP 192:sxZnR5CWE/fRsabIdpdIHW6+WNGYRPnxW+bfwLIg5KJ:sxZn5E/fRsaEOHbGm86fwDc
TLSH
T1F022C9516E28A97B8CCBD21DBB69BF53D6F9543291D41E48EAFC861C04E66CE130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a29217e-b540-4e68-b2c7-154415e20d01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a29217e-b540-4e68-b2c7-154415e20d01.tmp
Size 10KB
SHA256 7719de467e0f27cd612736de8939a57b1b009444decd07313705ac3261c3da5c
MD5 55abffa2181566146ef468ff6b8de719
SHA1 664df74d99ec600498b32f94a08bc561068a0566
SHA512 479d5d73b521d5f5cb9efa990481e0d2a6bc2690e51703c1f6a913af9a6572df08102fea230909ac8e27b840b31063a45662770a646bb7356efca128a5f5f1f3
SSDEEP 192:sxZnR5CWE/fRslbIdpdIHW6+WNGYRPp3W+bfwLIg5gJ:sxZn5E/fRslEOHbGmU6fwDW
TLSH
T1D822D9116E28A97B8CCBE20DBB69BF53E6F9503291941E48EAFCC61C15E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c3324e5-c94c-42f8-b72d-885f00e8f478.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c3324e5-c94c-42f8-b72d-885f00e8f478.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88975287-eacf-419c-8988-8306fe0a2884.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88975287-eacf-419c-8988-8306fe0a2884.tmp
Size 10KB
SHA256 b247c42f6a500bbec98d683f35eb44592540a510b472fccc247d8a8f6d8657c7
MD5 611166ba31cbb8514693ae06c8e1995e
SHA1 8427e717d9a4a0bd371e9a4bf1a6eed926d2fa0e
SHA512 8c8ae11e080a649e1b6417db15334903c16bfbdc2121c60489ae818476d6f3eed1a851de5a8677081893673cc7c4ed76e8566b7e2ace2bceaa32ad384fc5e8b6
SSDEEP 192:sxZnR5CWE/fRslbIdpHIHW6+WNGYRPH8W+bfwLIg5gJ:sxZn5E/fRslEoHbGm96fwDW
TLSH
T1BE22D9126E28A97B8CC7E21DBA69BF53D6F9503291941E48EAFCC61C15E6ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9835d949-2a42-4e17-bb5e-74f5d4496fde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9835d949-2a42-4e17-bb5e-74f5d4496fde.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f91c6ed988fb6ac3e4b5237d57565e52fcf7209e4d54659b1b0c06c49571797b
MD5 1b75ee25ee32971828c02b68717a5fdc
SHA1 56797797a54a861ffcca1472f6360327dad07b7f
SHA512 05444ab70ba2c622d01581d0e5db3f3eec3d0867db07c791206e5a9d95790c2a4c481eb62a40a9b8cf22ff1f1cfde82e48739616f575a8d9fd4959e28c1eb796
TLSH
T17CE07DC655C8C37EA30CA46741ED530CC2813A1BD3C0698EAB88CDC97083094BAC76F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6a4bd1280af44037c6de36f1dacf268fa2284f026274759e56fee8005e52929d
MD5 d9aa4e4ececb83e0d672f094423b06b5
SHA1 e97a1accba0f7d49282db6e7b396e74eee67db7d
SHA512 eee1213c6a08aea83e886d2ad03288c9f8b44c5c3bd7fe3d6068f607ec0b43ebc9ce0fc3b05ebf433b2a3476049f7b7f9cc8edf8537ca6bf9820ad19d81a885b
TLSH
T1B4E026C684C8C23FA308784702AC930C8282375B93C07D8F1BC0C4847081880A2A76B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0705f0fc6ee07de6c97dd40a1484992b93e1f16c7ac1058758670fbcd7a20165
MD5 2670def874114fb4cd097f845a4b3cc2
SHA1 f5131163d6561a47565e0125f2b0239822c4651a
SHA512 d23f12ee01691e369d11e77582444d05ebf2fc1a52b33d3eaf542185d9cc129ad35b1656ae288e89a9598ed488b6e7a5bde803bc6e96bfa022af6aa8bd7136b7
TLSH
T1E2615E890441E1E8FBAA39319AD850C33E34D88271871EF2CA9CDAF6548A7CD83D6C24
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1b090acfc1eb05d3e368e18d813828791a6f1677d16b77418f7567d85ba95801
MD5 1ec347d75046f45a908db2161786a937
SHA1 eb1ab4c4c894d0c696a2df8e25c51375a3a1282b
SHA512 4fb09582bd3d239512bba0f530257c1955a09380289482bac5bb8854c3622f1dad0ee688846aa91c0e252301cdc56960486fd1bbc96306112e5912e2e6cc3caf
TLSH
T1FD614F890441E1E8FBAA39319AD950C73E34D882B1871EF2C99CDAF6548A7CD83D7C34
MD5 SHA1 SHA512 TLSH

Submit Download

a8e1f6b0-4243-413c-b8b7-5ab705e8ffde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a8e1f6b0-4243-413c-b8b7-5ab705e8ffde.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

473e3c6e-ca6e-4f0f-b51c-64d8560b7996.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\473e3c6e-ca6e-4f0f-b51c-64d8560b7996.tmp
Size 949B
SHA256 3b55d7da62428db08ea559edd235bf63e1e636de3e841616ef0cb551acdb9e74
MD5 d06cef71707efa4c8f31b7cce8ead9df
SHA1 b975620d0ed99b0c6bfe3ca460ac15b5c1fc7afb
SHA512 b62b220dc394e853f788e1d352650047460f5a1f2353713c3160b3d1410a5b451c289f2252d3d1b3152156a8cb2001132b414275b7184742e6adfec2603fa137
TLSH
T1C6117DB3C3D5856EC91116F05A24AE2BDE2D0A06421C7C19C9D4EF2BD7F3075E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

63ab9cab-aa19-4bf6-baea-959fa1cf852b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63ab9cab-aa19-4bf6-baea-959fa1cf852b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

eca3d36b-5dc1-4c37-97ca-927a3ffcf528.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eca3d36b-5dc1-4c37-97ca-927a3ffcf528.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b2a4faaddd1e66f3abe97a95f63e5e360e1f65515fa8a1a3a0e7b43bf0382b34
MD5 6de019d96e4bd84319a53a9cd1df5c69
SHA1 3edee721cce8cafd0e9ed766b9a867d062c5a28b
SHA512 816b10928bc907fb4f3ac42ee15d2ec8b0882f1848be64ca027dde3a38e4c30e1846d4c18c5998141bf08e13e531bba962d2d1b8c324d36d31c36780461a3ad2
SSDEEP 48:K0mImKV4kKIYJbUzPISBkK9B1rkxJ0YyzJ5yLfir/BhBab5UpISPaK9v1lax/KYH:K0mNKQKDaKyAQKly2tKKOou
TLSH
T19B91FE4171BB128038BE264980BA861B524175B2705CE77BBFFE84758E6FE141CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fca7be26-07c1-44c8-aae6-42b75ea4df39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fca7be26-07c1-44c8-aae6-42b75ea4df39.tmp
Size 27KB
SHA256 a2c4096faf24512263ab6ddb0639aaaa793a4faf4c21a097d47075684e00fb0d
MD5 edf8fc39109b92b69e66b972d80c1947
SHA1 8464b3583d46058f3793ef82713e3d99cbed6d26
SHA512 4e792b257a759a0d159551518f599e5f1575a5e4f1f5ac1bfce6721fed97ecf1a52d98e034886587155a24a8a1890ef4ae4f6523902fda49b87eebe9eeeb20a9
SSDEEP 768:a4K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Vro++PV:a4K9uzYWvcQWsu1ja0HL7Q3u++PV
TLSH
T1BEC2093F640DCB7E4FC01A9DDC5A6F972E9802D7A6588D4047FA984C02C73EE522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fdd71ccb-f731-414d-b5c5-5ae500993b28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fdd71ccb-f731-414d-b5c5-5ae500993b28.tmp
Size 9KB
SHA256 f6c50f824c41a5662bda4a98d45bf1aba3b790e9ce5409f3e7af52ed2998c6bf
MD5 5063494848b5857881f68dd5e24d5ffd
SHA1 47a5e02bb41f6cb93349f60abd29e05016c96f84
SHA512 5ee8e8e773d9ef147e1eb608620b3973a296ff45aa8e468b8d684142c839950c4e584dff7338972b0e8613c5fa9bebfc8dc1cd06f4fe733dcc088f95ff07f121
SSDEEP 192:sxZnR5CWE/fRsebIdpdIHW6+WNGYRPnxW+bfwLIgrJ:sxZn5E/fRseEOHbGm86fwD9
TLSH
T19D22C9116E28A57B8CCBD20DBA69BF53D6F9543291D41E48EAFCC61C04E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0010596c-e616-43c1-b9d1-b7ab00435873.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0010596c-e616-43c1-b9d1-b7ab00435873.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4d13d86-354e-4cc4-9fec-f4d00ee23577.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4d13d86-354e-4cc4-9fec-f4d00ee23577.tmp
Size 8KB
SHA256 fe2fe161f5e779bc81e710e0f0cb66a95352dc7e26c94119ab583ad1d6f05ed9
MD5 fffaa59e3b47ffc14cbe9362b3e34218
SHA1 db15b862aff85be8224177be1b891e8837c86bd3
SHA512 25513af8e18d03cdc1e09508d63b0290b0a9f1027ff9d6b5369da88d06b8613e6301e899b4c5c66889a250f8e0c81b670a1492a632dc9e1f51806ffe4bc242d0
SSDEEP 192:SONp6ygpQmiUypMtOCTVg7EcOys8zPSJU6:SONp6lHLtOCTVbcOysO+U6
TLSH
T11A02E835BC6C2CB79EA3AE45F88A3717AFA4117BE9912B80D5E81E1C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c06e4b1d-7c02-4daa-8b33-6b4143b3dc22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c06e4b1d-7c02-4daa-8b33-6b4143b3dc22.tmp
Size 18KB
SHA256 067b274d119e1f9ac49144b3588b8644fb20402c6f401a59f2271a844bcfc4df
MD5 8cab43ade746821cad6e183b80d383b5
SHA1 7760f48b343b4e03d4252907fd7adb416b78e9c9
SHA512 1b4d071b07a7f8248e9bff7bcddf2b566bd1feb873c9faa0e492cf43189a08ad2c97bb879d470a96cf5025bfdc78cd7da9c59a44b88033ba873048031c0ca8c2
SSDEEP 384:KQkUSv0sN0U2wjQP1OjTVbcOysQKjm+2eI7H7vBEX/IIlV:y0honSOFjmlz7H75EPLP
TLSH
T1B2827C71AC781C7759E3A200E14E3653EFB89567D9D92B90D4DE9F1C00CA6AC338BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20670cd0-6f9f-4d4c-b8b1-6d177abc2c66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20670cd0-6f9f-4d4c-b8b1-6d177abc2c66.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bdb26b91e2d48e90e708c26ed50dc9bf541326bf854882ba8b9ede7c9773418a
MD5 643ccde2fb137cea5a4809b87e9e90df
SHA1 fd6e844063097f4f876e404ebc62e0ac0459ada1
SHA512 2d0b5561365fbdb7b4ea914a31844a9e76b14465eac2e2e0f7d1de56ae78e15c5ae0a42b127eee843427511d25a812adefe5730e95998806d6b2b6269d18256f
TLSH
T1E7412A58ABE91108B3736E569BF7A86D447E7D772F07949E10110D4E0A32A00C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download