c34b6a06064fbf6513e1de7592cbbd6bfb1a5e476c3c7c3db54a34056b9de132

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 212B
Sample261102-pm286aws7q
SHA256 c34b6a06064fbf6513e1de7592cbbd6bfb1a5e476c3c7c3db54a34056b9de132
MD5 cdb29142dac7aa62776d20577bd5e136
SHA1 2366d57e2c125d0f4db8565b77aea8c9bbfeef02
SHA512 948f64714e354b78c641e4f9a650223c125700b10da3fcc300c389d5019a24cd0733496b40a58c70f0f4dd0ad5ace41b471b9f63f23d78b5024a08f131e41f8e
TLSH
T1CAD0228F1CA1E00931A061020EC2F23828EB03A31184C00079C9E2211F1473FC80379D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3504	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{3E19C641-143C-4A6C-B198-4352810302EC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3804	msedge.exe
3804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe
3228	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3228 wrote to memory of 4132	3228	msedge.exe	86
PID 3228 wrote to memory of 2632	3228	msedge.exe	87
PID 3228 wrote to memory of 3504	3228	msedge.exe	89
PID 3228 wrote to memory of 2632	3228	msedge.exe	87
PID 3228 wrote to memory of 2632	3228	msedge.exe	87
PID 3228 wrote to memory of 216	3228	msedge.exe	90
PID 3228 wrote to memory of 216	3228	msedge.exe	90
PID 3228 wrote to memory of 3264	3228	msedge.exe	91
PID 3228 wrote to memory of 3264	3228	msedge.exe	91
PID 3228 wrote to memory of 4492	3228	msedge.exe	92
PID 3228 wrote to memory of 3264	3228	msedge.exe	91
PID 3228 wrote to memory of 4492	3228	msedge.exe	92
PID 3228 wrote to memory of 4492	3228	msedge.exe	92
PID 3228 wrote to memory of 1552	3228	msedge.exe	93
PID 3228 wrote to memory of 1552	3228	msedge.exe	93
PID 3228 wrote to memory of 1552	3228	msedge.exe	93
PID 3228 wrote to memory of 1560	3228	msedge.exe	94
PID 3228 wrote to memory of 1560	3228	msedge.exe	94
PID 3228 wrote to memory of 1560	3228	msedge.exe	94
PID 3228 wrote to memory of 3768	3228	msedge.exe	95
PID 3228 wrote to memory of 3768	3228	msedge.exe	95
PID 3228 wrote to memory of 3768	3228	msedge.exe	95
PID 3228 wrote to memory of 1372	3228	msedge.exe	98
PID 3228 wrote to memory of 4148	3228	msedge.exe	99
PID 3228 wrote to memory of 1372	3228	msedge.exe	98
PID 3228 wrote to memory of 4148	3228	msedge.exe	99
PID 3228 wrote to memory of 2780	3228	msedge.exe	103
PID 3228 wrote to memory of 3980	3228	msedge.exe	110
PID 3228 wrote to memory of 4932	3228	msedge.exe	111
PID 3228 wrote to memory of 5064	3228	msedge.exe	112
PID 3228 wrote to memory of 2780	3228	msedge.exe	114
PID 3228 wrote to memory of 2780	3228	msedge.exe	114
PID 3228 wrote to memory of 1036	3228	msedge.exe	115
PID 3228 wrote to memory of 1036	3228	msedge.exe	115
PID 3228 wrote to memory of 2020	3228	msedge.exe	116
PID 3228 wrote to memory of 2020	3228	msedge.exe	116
PID 3228 wrote to memory of 3804	3228	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff92c9ac188,0x7ff92c9ac194,0x7ff92c9ac1a0
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,1155888280635707738,1971113761696705500,262144 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,1474926325599969173,6463677990352584187,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,15395059858879515060,16458590811801200658,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,3817090215136573234,8875344119025188544,2097152 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,7316182037578526606,7190331052981674254,2097152 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,15257573694111628634,8980697109190552214,2097152 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,12333773727520054315,8683410711442902499,2097152 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5096,i,734285052181771049,6708089776143221135,2097152 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,8204697679989475376,10176274463905042175,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,12314240859763084750,6252318023560275678,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,4311544474184398498,12526593169727843708,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,4311544474184398498,12526593169727843708,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,3360063056499548679,5548382642991108878,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,7083721957263117927,14719082107318728641,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,6854879308742288871,16479056646195191819,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,3748096265407124750,3007508943254332454,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,10392018779055822122,18001003897415537173,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,2849089701001905723,11959398390637767037,524288 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,2699603735489538784,11962453374432341883,262144 --field-trial-handle=2288,i,11651256129438452033,15409848472670949485,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

72efa4bb-ed8f-480f-956d-856e1ba81aa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\72efa4bb-ed8f-480f-956d-856e1ba81aa4.tmp
Size 18KB
SHA256 f231c432a05d03a4d69c789acaee12cb53f9fd45adb82684361566f36bd41274
MD5 2d85aad6f11c00fb7e7b7c81fb8d6e9c
SHA1 184f56287002db0a8ae52ace2ebe0ca7f774ca24
SHA512 7623dad1207276093c889daaef708ee88ba205f3b58f0fa4116e232071ef928d04f1b44f531d1c7097af9f1dc50931cca6dea42d8b66d5413742699c8aee27cc
SSDEEP 384:8QkUSv0sNM/jmXvvp5u8i3xKDCH7vBEL+IIlb:80qvnk3oDCH75EiLV
TLSH
T1AC827D316C786C2F5AE3A610F14A3A53DEB4815BD7C96F90D9DE972C01DA2D9230BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ace96f7-27a8-4dcb-b2d9-72f388aab850.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ace96f7-27a8-4dcb-b2d9-72f388aab850.tmp
Size 8KB
SHA256 402685825f36c4936fcd1027b0e210b91434254e8ac211d260742840c2ff86b8
MD5 e3733084caac8f8aceca2848934618ad
SHA1 58e7b6383b825b39dc86ec855de359ed0fba74f0
SHA512 8072adc227703801f7a2bd088e6c3c6822980ef23c5a1b7656c1cb20a7ea2450a137c4805fc6ef6cbc13ec2a79de4f1b8bfdd1b215dea76205aeab696c3e28ca
SSDEEP 192:5ONV6iDWQmiUyFZ1tq5u88P3xiHkuZSFqKU6:5ONV6bsftq5u8i3xKbCU6
TLSH
T1581209366C78BC6F6D92A961F48736139EA4416BE789BF80D5DC272C05EF29C130B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

0b88ec85-32ab-4595-b3d9-7cb76a6e92d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b88ec85-32ab-4595-b3d9-7cb76a6e92d1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e6ab8f0-5d63-4cfd-b4be-303fa4c3abf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e6ab8f0-5d63-4cfd-b4be-303fa4c3abf4.tmp
Size 10KB
SHA256 5e4f309a69fec233e2bddb7ab8fc56199a642d8fa2af3e0a1699bb75be5b63af
MD5 ca9d2250ac6dfd6399ceee6db6ee184b
SHA1 7689a755f00131849eceb3a1168871c5fdb51490
SHA512 a437630f5f9b8976320155098cab5abc1e779a3e2d8e26d5828b084238b1c4bedc2175e876e0cca469451060d600e91f25ef26ace4bd7ae3146076fe3c6d7544
SSDEEP 192:sxZiRuW+/fDstsTIdpdL4HW6+WNGYaACwMIg5iJ:sxZiL+/fDstsMh4HbGLY
TLSH
T11522B751AE28697B9CC7D25DBA15BF43E6F9503251901E48A6FC8A1C05F7ACD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18453954-4d39-47e1-9846-f5c74b54bf67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18453954-4d39-47e1-9846-f5c74b54bf67.tmp
Size 10KB
SHA256 2efb4516ec32c76dee1f645d3089f29fb3cc74b861c7d6131907f91f7de433b0
MD5 66b2918bfdde56f6ecbd254a20b7786e
SHA1 3266cd6db14bff7d43fae8e06ffda0bc18215ebc
SHA512 342fb94713c52183c36097e118f16fab7a1c70e73447194b37d285e18f096fcd51b651f02128c162f8882169fa40d37bea0480e32c2e0796fa25fc83939461c3
SSDEEP 192:sxZiRuW+/fDstsTIdpHL4HW6+WNGYaS5wMIg5iJ:sxZiL+/fDstsMr4HbGUY
TLSH
T1A722C852AE38697B9CC7D25DBA15BF53E6F9503251901E48AAFC8A1C04F7ACD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77ea8468-f604-47da-a487-6293570d7325.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77ea8468-f604-47da-a487-6293570d7325.tmp
Size 9KB
SHA256 05a1ae469112e56185039699251c73fce5f89aedd9b9b63783e9d9734e7e10b7
MD5 292dde8ac4268b04b17b2f584ee8281b
SHA1 5b3ca558de21ce283074cb44aea7a24cf180ad74
SHA512 954372802735860da32e7acdc858f637e824453003a77be69fa36a05cb342f9a00cf4fd3836c2ab63d7ad115d0b045677634293178b07158c345c7e4f55ef701
SSDEEP 192:sxZiRuW+/fDs7sTIdpdL4HW6+WNGYaJ2wMIgrJ:sxZiL+/fDs7sMh4HbG09
TLSH
T10922B7516E38A97B8CC7D21DBA25BF53E6F9503291D01E48FAFC861C04E6ADD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80e79c62-f29b-4964-ac4b-eeb987583ab3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80e79c62-f29b-4964-ac4b-eeb987583ab3.tmp
Size 9KB
SHA256 61ea03ce00e6237f5e684efaf69b61c34923e90208b4053a0051f7da01402628
MD5 747eeec82712296ee1f4f29a038a86ef
SHA1 6447949d9cf743d181ba27043598ada2b73473e5
SHA512 0b43a9111707080fda6161d24b519c80af9073812263547e6a2d99044878248ed2fe5d439b09ffe1364efd7f3628f3bf1db5ac649a827b480e2a881d09bd3d24
SSDEEP 192:sxZiRuW+/fDsxsTIdpdL4HW6+WNGYaJ2wMIg5wJ:sxZiL+/fDsxsMh4HbG0K
TLSH
T1B322B751AE38A97B8CC7D25DBA15BF53D6F9503291D01E48FAFC861C04E66DD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 19beaba0fa6f24ec974a45496418d6d0a5f41135da5eee73a5003988cfba4db4
MD5 8b7beeec7270439015bd835bb8dc9aec
SHA1 3df42a878ecf61984b1651f0415a20e02dde024b
SHA512 e55ece26b90f91cc62a8932d2212216d7236c00f5b182f461ba3a3e2d43302de4cfc61b405ac3351e44108cced4fa0a5bf70911cf4a649cd4df7449d08277b65
TLSH
T12BE026C788CACB2FA308A55B41BC930C8291372BE3C4EE0E5784C8A47043044E686AA8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a3d51df407f6dd2e80564f80e72102ec1a52ec07b85b903c8d2d37ff09a3d86e
MD5 9c3f79a0f96fd7e781019eeeeb2b6c86
SHA1 ae639cd37cdee0c5dcb67f7384fb44ac14fab290
SHA512 403c3284b041865becdefcae9a2a4d66c8714b09d17d401cfb5d087fb8ad43118d92cb7a06638ef4c1d0834a3e5f446b3237a0cd988f3150120d43573c8d3a66
TLSH
T118E026C596C8C32EF308744701AC530CC280371BD3C0A98E1780CCA57602880A68AABC
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 19b6e6f3ef7297bc33b34fd9ce6dc96b28dca8b5fd1ed334480a71c022cd35a2
MD5 78d608ada7752b8566d64fd426478099
SHA1 23ba78611deff1e23d35fb759aeb3bb9e7df4ca4
SHA512 4f0a18ab28bdcde0ae9b5b151e8b60ee66523224742506ab0c8c6ea695fd3e4b17aa2c078c6240ff95df8a8e46240962a12042dcb5e4778a9c03c4e5a295ab10
TLSH
T1C76194E2508C9034F7BC64FB57DD815B3538D9867FE3FE1225E4E938882636A3398A44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 da74010e6614fafef4f91350be670e26b280eebec87d3a169de7a150dc56742a
MD5 eb1572264dbb3eba3f21eeb62e80dd74
SHA1 c01b46b0a56fc906ad67b9464dbed2afd42a30f1
SHA512 8e4a8af99b6944f4672eb0bc073d91bcbf3c27f9fdb9ab107a1b85cd76326cc4d62fc8be67d7180ebca0cafd681021788deaa84ceb8551aeb05b2ccc17e4cc7e
TLSH
T1766184E1508C8034F7BC64F757DD814B3538D9867FE3FD1225D4E838982636A3398A44
MD5 SHA1 SHA512 TLSH

Submit Download

d7805158-f952-4f7a-8194-e706b232f8a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d7805158-f952-4f7a-8194-e706b232f8a6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

bb33211b-0d36-4f6c-85ad-e59791ad148d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bb33211b-0d36-4f6c-85ad-e59791ad148d.tmp
Size 949B
SHA256 d6d0f745059279ca8b764968ff848afa46d69d3fc0530f65983bce8ef49cafd4
MD5 0ffc8d17426fe027b4b162ee45ab31ff
SHA1 ae2e0dee07323df85afb586f9fa53dbcdf29274d
SHA512 634f58d16ad272ad7e00d601331c4eea346663028aad94921524bbdb93da41c21e4854d1d4e03ee045c9ec5435ede98ab9295cbdbc578920734ef32c6dc709f5
TLSH
T1F5117DF3C7D5896E890116F05A24AE1BDE1D0606421C7D15C9D4EF2793F3479E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

cd3b2e74-2ce0-459f-bffd-ea4c48e5df21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cd3b2e74-2ce0-459f-bffd-ea4c48e5df21.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d3632889-14f1-458e-89b2-392ec1cbbb71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d3632889-14f1-458e-89b2-392ec1cbbb71.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

caca9e1e-b291-45aa-9432-d203f6953f31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\caca9e1e-b291-45aa-9432-d203f6953f31.tmp
Size 27KB
SHA256 a947ad4346d624ed69347967fcb7b7a16f2be5dedacfdc82b7bd14c77f7c77e4
MD5 4dd319885f02b2cece3617052c52361c
SHA1 94f851a54484889ef679ff8c9fa521541024c67e
SHA512 32d53434026f04d5ccc6c97b1b87eee348d1c82b41b5015d2ae60bc12abcf04f4cedace2f3009573352a918ef50cc058b75fd41fe4b9d7fef7a741d3041966d4
SSDEEP 768:tOyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3srokZrD:tOyQRbrWvvlpZu1jaXKLf333kZrD
TLSH
T19AC2F92B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fae6bce6-ed31-459f-a294-4996e830f255.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fae6bce6-ed31-459f-a294-4996e830f255.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac3ce4ff-9344-46ac-8d11-984313dee5aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ac3ce4ff-9344-46ac-8d11-984313dee5aa.tmp
Size 18KB
SHA256 6ae2cc200a1e4d06ea72ff03b37b35e76904739510422940cb679d595c53f38c
MD5 e4e47e36a529f57339e871cd49a591a5
SHA1 bb484253ce09ffb14f88836b8034a9cf157c1ecd
SHA512 34774b30fc12e8d11c79f2358fd3d0764ab96a1b652b2eb033ab22086e62cdbea09ceb552492437c871d56a4cc544589a1059cc97de9c2580497944b68f21a9d
SSDEEP 384:yQkUSv0sNM2jmXvvp5u8i3xKDCH7vBEL+IIlb:q07vnk3oDCH75EiLV
TLSH
T1DC827D316C786C2F5AE3A610F14B3A53DEB4815BD7C96F90D9DE972C01DA2D9230BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc4a3bb0-db52-4399-9ff3-b478da8faa74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bc4a3bb0-db52-4399-9ff3-b478da8faa74.tmp
Size 21KB
SHA256 d5d64a2dbcc31baade0e6af8b322fb8ee7fd58bbd78991cc522f2299c90a5eea
MD5 79d5e387b5dfb97e5a5f89abda1af770
SHA1 0f77cdd15e7032f4b95631ddb1b5d135e40b0949
SHA512 4758021afd404424590257217a791b9d0e399934ea2e609f1947f65cedecc3f33edf0f3fdc18ec6e1c78ed496b4f5562e95aa65b3ca9d2bf030d5567536cce2c
SSDEEP 384:QiFzQkUSvZzsNE8TUNTUlIl/jmXvvp5u8i3xKKCH7vBEL+IIlb:rFdZFwgEvnk3oKCH75EiLV
TLSH
T1B3A25C335C689C3FAEE39F50F14A3653DEB48167C695AB90E6DD9A1C00DA1DC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e64d4685-3b18-4a3d-9571-ee08e570764a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e64d4685-3b18-4a3d-9571-ee08e570764a.tmp
Size 8KB
SHA256 8e7bbed0c1997fccab663b8b964c1d8f80ffdff7b3cdc9b6a79202270f45c215
MD5 bbb69255a0d2ff61bfb3c2923e642331
SHA1 a4d3ee783456de1a83ff7b3f082b80a30d1d8320
SHA512 b7828abdd8d0238465add2d7f4d95abbeb0b0512c664d90ee627608bf34297268b46acc1ab049a45cca771f22464d097302e42a8d84c7efb65b7fb5e502bb4c5
SSDEEP 192:SONGh6iDCQmiUy/1Hq5u88P3ESqSOnsU6:SONa6/AHq5u8i30eU6
TLSH
T1EE02FA396C787CBB9DE26D15B5873B179FA5112FE6942F84DAE8172C01E729C1303923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e37aed5-8110-42c8-8cc6-77916a0bdcf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3e37aed5-8110-42c8-8cc6-77916a0bdcf6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a2aa35726eaeef4ca2db059998332203254e335d6c90856defd9d1b64b20c7be
MD5 1af275e7e98fd52070bb2904e5652e3a
SHA1 7de0e807468ed10f09ebdc8b550c0aa74e3403f9
SHA512 7bc8d29e364fe088e657d82990728b416551c14400cb7134716a727cf3b075549cc93645b6a5d9e0cf54e69abcabb81e11297bb80331fdd82b4f1e3d6d008ba1
TLSH
T1B041E559B6E91148B3B77F16ABF6A86E487FBD772F46C4AD10010E4F0A26B008861737
MD5 SHA1 SHA512 TLSH

Submit Download