79d2d19f4dc116f5b840d43a39fcf58af1a564d96688d78f6c01ba7e00628782

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 18:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample261104-wwfj3seb83
SHA256 79d2d19f4dc116f5b840d43a39fcf58af1a564d96688d78f6c01ba7e00628782
MD5 2bce8f9b15e25611a47cadd7e6cfe72c
SHA1 a0a4b56e62bb4ebc799fa85d49ff0c4332278e4a
SHA512 5e1dd0a4a08e968167eb6358478d7c3bfc5d5150d26cb96b3d7880f9a4e90563fdcbc54949aa7044fbaf6833d60413a5d89b705191e6dcb0dbb51b916304150a
TLSH
T16951A628751C8A2F22920D8CB9D17008B16B3A15310DAA10F6FBA979AD00BDB4E719DF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4268	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{389DEAC6-0ECF-437E-AF86-3B6228835675}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
788	msedge.exe
788	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe
3600	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3600 wrote to memory of 4900	3600	msedge.exe	89
PID 3600 wrote to memory of 3692	3600	msedge.exe	91
PID 3600 wrote to memory of 4268	3600	msedge.exe	92
PID 3600 wrote to memory of 4140	3600	msedge.exe	93
PID 3600 wrote to memory of 3692	3600	msedge.exe	91
PID 3600 wrote to memory of 3692	3600	msedge.exe	91
PID 3600 wrote to memory of 4140	3600	msedge.exe	93
PID 3600 wrote to memory of 2804	3600	msedge.exe	94
PID 3600 wrote to memory of 3100	3600	msedge.exe	95
PID 3600 wrote to memory of 2804	3600	msedge.exe	94
PID 3600 wrote to memory of 2804	3600	msedge.exe	94
PID 3600 wrote to memory of 3100	3600	msedge.exe	95
PID 3600 wrote to memory of 3100	3600	msedge.exe	95
PID 3600 wrote to memory of 4264	3600	msedge.exe	96
PID 3600 wrote to memory of 4264	3600	msedge.exe	96
PID 3600 wrote to memory of 4264	3600	msedge.exe	96
PID 3600 wrote to memory of 2636	3600	msedge.exe	97
PID 3600 wrote to memory of 2636	3600	msedge.exe	97
PID 3600 wrote to memory of 2636	3600	msedge.exe	97
PID 3600 wrote to memory of 2908	3600	msedge.exe	99
PID 3600 wrote to memory of 1104	3600	msedge.exe	100
PID 3600 wrote to memory of 2908	3600	msedge.exe	99
PID 3600 wrote to memory of 1104	3600	msedge.exe	100
PID 3600 wrote to memory of 1976	3600	msedge.exe	102
PID 3600 wrote to memory of 1572	3600	msedge.exe	106
PID 3600 wrote to memory of 1968	3600	msedge.exe	107
PID 3600 wrote to memory of 3820	3600	msedge.exe	108
PID 3600 wrote to memory of 1908	3600	msedge.exe	109
PID 3600 wrote to memory of 1908	3600	msedge.exe	109
PID 3600 wrote to memory of 788	3600	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffc37eec188,0x7ffc37eec194,0x7ffc37eec1a0
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,16614819729507903747,5494601694394362988,262144 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,8626310001802633653,11166216343864858956,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,14005928039342005745,17840956727858243089,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=1876 /prefetch:13
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,14040727621099551491,8765234662076063189,2097152 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,10605172613047833861,10221421335369400495,2097152 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,16477322289892382203,16430745305856014846,2097152 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,327618428929403025,4153826665672567483,2097152 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:9
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,8550526064608540169,17238527570722763056,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,14109032248276404749,16420528249408432278,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,12972039239579791427,3767710394705981792,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,12972039239579791427,3767710394705981792,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,9777268466235666881,3866803234497647779,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,6357361288661118690,5897828238231798012,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,11987385342369927445,8018974613386253384,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,15697499085079008736,17083134796973309556,524288 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5296,i,12108864590734635097,5659366874902695318,262144 --field-trial-handle=2196,i,10272291742933381845,5044041184779079759,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:788

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1fb78857-e184-4f40-97e3-bf9f8b37e907.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1fb78857-e184-4f40-97e3-bf9f8b37e907.tmp
Size 36KB
SHA256 3905e6c40e703306b060e73770f6e2ac1105c572fd4e8c3791c29a4a41624b64
MD5 4f8ee523084f37cad1717ec61c5e6641
SHA1 3fc8ea33c2b99006c9d08639f126b2a287af83a6
SHA512 e4fe2f755acffd923fcc8cc0e03ba8df2560e202c9d9038f51367313f7454880a0160584e15a676b3f85209a742865c688a5e528577d9ead16a66447ead6d493
SSDEEP 768:fFdJ39wg7PBbOxs6/9OA9at01j0iq00+IaixxE75EgLm:/J3njCHq00NaEknK
TLSH
T1E6F2AE72ECE4CE77ADE6AB85B2093352EFF05257C9C99A90CADD290D00475DE134BC62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

206276c5-1a34-4fd1-90e8-f8b46c1e9a60.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\206276c5-1a34-4fd1-90e8-f8b46c1e9a60.tmp
Size 34KB
SHA256 87c94c93f52b5e9f641e744b83d72f099b580514ecd4775c4685571556b26aa6
MD5 4c53b0799fd93eaa44b6bac8f13be4fe
SHA1 c0c3227948c8c137b07792367838383a94700621
SHA512 fac5d1c4a9bffe280a00af25c1156e9303d2871bfb2e61773c535b2a58ae2769eee0cc1103ff70b9e4d3ccf009d140ac7339b3529a0c28ec7652e6515db6f15c
SSDEEP 768:SR32PBbOxsu/9OA9at01j0iq00+IaixxE75EgLm:SR34/CHq00NaEknK
TLSH
T1E6F2AF71FCA59E735DE2A645B3093392AFE45217C6CD5A80C9EE2A1D004B69E170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

250e922f-ddfc-4f53-b4c1-9f7ec6bf4762.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\250e922f-ddfc-4f53-b4c1-9f7ec6bf4762.tmp
Size 34KB
SHA256 ef953ef40498287d619197cbdfdffaf6149d01ce0f21a2eaada6b3bc72f955f8
MD5 886fae093dc7795576e9a15daaf938ea
SHA1 59ba6880074ce66ed559322fc821d75307adfad5
SHA512 0e123a9cacfee3c4ac8d07ce3827dfb45359deab768b2169f570394771448687f3750b45c4f35a3675b77e7295799527097f7ffae3a9f1175d4c53df4de228de
SSDEEP 768:nR3NPBbOxsu/9OA9at01j0iq00+IaixxE75EgLm:nR3Z/CHq00NaEknK
TLSH
T114F2AF71FCA59E735CE2A685B3093392EFE45217C6CD5A80C9EE2A0D004B69E170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

979f1fe7-c1c9-4b8a-9b35-f8457206e1c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\979f1fe7-c1c9-4b8a-9b35-f8457206e1c9.tmp
Size 37KB
SHA256 6fcc507ccf6c3023e09b93f9c8f7af081459bccde452e4ad5ef399745c724382
MD5 e622f80aa52a73c4be72f2dddd400c19
SHA1 f5df7b2d26e75ec973d5b7033b9bdf603418a30e
SHA512 ee3246f298bf6c80ac91e4c36012287d464b97dd31b2155c73c18df8ef8875ea5334d4dd4b6b980cb86f59f5efd0a19d8daa274723f31d1d32f2419c8db73619
SSDEEP 768:X/UxvxjgC+H3OnQOxi/9OA9at01j0iq00+Ia2PSHxRz:KZj3+H3O5CHq00Na8STz
TLSH
T16303C031ECA19D739CF7B384730A6397DFF45663C6C96AA04AED2A0D01876AD1307867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

28f340e0-683b-43d1-8c14-1dc87a0f4780.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28f340e0-683b-43d1-8c14-1dc87a0f4780.tmp
Size 10KB
SHA256 3036a40dcd94d27962e3c5ab2870e271c2b2dd63d85ef3fb07b7cd75325969b3
MD5 74a10cc19ceadb9990fe86a15b01b736
SHA1 ec7adf26ea3d1907ce96e7d6819344f19fca3775
SHA512 9fbac2ad2df8605f0cf7a0e5a45fd479965ef9fb4017fe4f95cdd3b2927f94ffaa6e12294f5ea1b8977844e279aafadb58097dbc32f3b3945aa2784a04d4b3e2
SSDEEP 192:sxRkREb5/f4suNzoA8p4V/g6+WNIYodbE+GI/aIgIJ:sxRkE5/f4suA0/5Ii6/6s
TLSH
T1AF22A515AE68A93B9CCBD20DFB65BF53D2F95032A0951E48FAFC861C04E66DD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ea585ad-0e22-4afc-b6e8-78de7b39beb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ea585ad-0e22-4afc-b6e8-78de7b39beb1.tmp
Size 10KB
SHA256 1d53357dd850839d3177bb79476e8f8b76296ceba512bbab8b27df5c23107864
MD5 6e7647ed0c6e132051c533fd732ef347
SHA1 8d8b8f597dc0bd7f64d1a0da57b075523a282003
SHA512 b8a833fb6b9ab00e91e610162e663930b6dcdffe993dd88835ae70a96aca4f20f203a2d268736c4c6d76f20bfad2e2b0318636eae02842b8e5e22730764103e1
SSDEEP 192:sxRDREb5/f4s4NzoA8p4V/g6+WNIYodbE+GI/aIgDIJ:sxRDE5/f4s4A0/5Ii6/6o
TLSH
T15B32B515AE68A93B9CCBD20EFB65BF53D2F95032A0951E48B6FC861C04E76DD121780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75e6fe45-7d42-48d7-abf1-cf71bf0111a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75e6fe45-7d42-48d7-abf1-cf71bf0111a8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

8a51f0b2-f4a8-4fd8-95cc-2a017ea94a8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a51f0b2-f4a8-4fd8-95cc-2a017ea94a8f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a2cb699-10d8-4e64-b26d-f99b8b416380.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a2cb699-10d8-4e64-b26d-f99b8b416380.tmp
Size 10KB
SHA256 9dacc3e0aa3b9d8dea5dbbbf0659e738cb9cb1a9808326f862f9c7fe997c25b5
MD5 135c6ebf4ee2d6e6b3b84737ffe08628
SHA1 b573954ff6c9f382f4e72ac0094790bcbc94f52a
SHA512 971249c074b9bab26886177f85d69a7d531c8100ace0d6be1c3e44de5e1d6ade276eb5b961568c9031dad2ec6b714a8ea2bcf783c773b464aac089d6da13bc6d
SSDEEP 192:sxRDREb5/f4stNzoA8p4V/g6+WNIYojFE+GI/aIgDaJ:sxRDE5/f4stA0/5Im6/6i
TLSH
T1BE32B555AE68AD3B9CCBD20DFB25BF53E2F9503260951E48A6FC8A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 8ad2063a42ac7cc54e5765fc58ce1a3c535f78f559f6485c78c88824ad3d44f8
MD5 5947b891f1b7a001b5031ca2d3b530d5
SHA1 a674ee0cf04df4f293190e50354c79f5b3ac100e
SHA512 3c559fceb2fa4e5f49d70c968ebaa8224af183943e9b70fe5e04e3d42867d184208584c9ba4809b33a4aede0c2e563d39b802f89b871e38474d690b6488dae02
TLSH
T1906185414357FADCEBAC85F1C9D6189B367069B15E831F12E4C5CDF86B06FA242CCA84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 276c7649bae18fb06fdf1a3d4e71c72a07e464af1548208374a8eb5614421a61
MD5 bd782478fe3ef968fede673dab93a4c4
SHA1 f4ff08e8cbf6ccc7372d745d899e952990fa3dd5
SHA512 2f95765d8a34e93f25c8e772d316ad74ca62e2de38de0e33796e4ee93c2494950a6ad779e51de468746932d2427e9640edc39e94afd183d9e47a63625bdaaace
TLSH
T1E26185414357FADCEBAC84F1C9D6189B367069B15E832F12E4C5CDF86B06FA242CCA84
MD5 SHA1 SHA512 TLSH

Submit Download

7a1999a4-1630-4a3c-bb1f-e8f59163b3a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7a1999a4-1630-4a3c-bb1f-e8f59163b3a7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

12810e9d-23d1-41f9-b1aa-53ca2f93cf54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\12810e9d-23d1-41f9-b1aa-53ca2f93cf54.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

32aa09f5-2d48-46bd-b065-a13c55dcbd8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32aa09f5-2d48-46bd-b065-a13c55dcbd8b.tmp
Size 1KB
SHA256 def311a0d624140199070d33bffdaa949dcd8b31ddcb517d0573fca49d6ef77a
MD5 bcc2db36408d0b24fbd7dff6f86ff749
SHA1 870b732c883a6b2b4a304f4c854ec1eabe0ff448
SHA512 afa67538b67980ac3fe8c986075fe82baeaf0d7d0c77bbda6227cbda48e2392d13c539c052de0d885d3148d0dfc9886558c73595ef4216d7b445e517aaf555af
TLSH
T19741AFF787F4866E890196F0AA14AE2FCE1D0515432C7C5689E4EE1B93F34B1E04169F
MD5 SHA1 SHA512 TLSH

Submit Download

763381be-83eb-4545-a2dd-864cba23f376.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\763381be-83eb-4545-a2dd-864cba23f376.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 575daafb3398071cc4c44d1c3dd3917f0f8869b37f81ceb876855e5255efd37a
MD5 23fb6611065a1a181681a6b7968b9a74
SHA1 95a2e384e53b9073ccd2c0f3b5ddca34b39b7231
SHA512 22559381941b1dd81d1640b4f951bee50adbc5589484eb2e22a604f303b85f497370a0a133aa1fd191b25e14c19675ebe088f7d9025ca12f0c5d5c2bd3968bc3
SSDEEP 24:K8m6An7Ho8lpk5lojPImjkKPHhHJk1NL0SLa1rFL5yXNQwYpVraSjj+tzOvlIENO:K8gI3K5uM3y52IfK3KkLMI7KVKc/yO
TLSH
T1D7916094B07A13453D3E685840E4972FCA8275F33128A66B7BED84A24E7BE045DFC4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ce7f0b4b-1cad-489d-9c41-5eee3425aea2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce7f0b4b-1cad-489d-9c41-5eee3425aea2.tmp
Size 23KB
SHA256 b3d2e85ad3d1f9f51a411eaf0e92bb6cdab6635e82c4f2bb3a285347038b348f
MD5 1d297f0f02128bf2546562c739f4dbde
SHA1 281c87f753ff2cfc028ad5ee2cc6434684d9bf55
SHA512 1b804e846cf13a639c96eac2cdc4b86d3ded4404b10a3601ce8e872cdbab70c8c6fbf0f3339d244a8945afa52be0d263c2d2409614458943ccbc990a2bf988dc
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUlrondQ:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VB
TLSH
T129B2D92B744CCB7E4FC04A9D9C196FDB6D9802C796588D8047FA994C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1cd6d64-27f8-49ab-852d-32fe207949c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b1cd6d64-27f8-49ab-852d-32fe207949c9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a82ad70d-825a-418d-959b-c34538dabe52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a82ad70d-825a-418d-959b-c34538dabe52.tmp
Size 38KB
SHA256 15789f63c08c52ac38aee51d88ce0ac7592ec6233a07797d8bcfbf91a29a060f
MD5 57927354b47ba36f9ddb0c4effcbf958
SHA1 7a40883509bbf53401e6d636f5f07efeb7afb4ce
SHA512 94c8b8c3a4f9ee4899ba23ef8b2d3de4bc3260c305f111b1e5528b76875254ed6d9b50e60c2da707402be0267901e20732651a01866ea3d8b9ea4cd90d95e52f
SSDEEP 768:v/UxvxjgC+H3yQpOxsp/9OA9at01j0iq00+IaXxxSHxRz:CZj3+H3y7CHq00NaPSTz
TLSH
T11F03C031ECB59D73ACE2B284730A6387DFF45613C6C96AA049ED2E0D01476AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba7c1b47-8124-483a-a7ca-e279699f30c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ba7c1b47-8124-483a-a7ca-e279699f30c7.tmp
Size 40KB
SHA256 43d48c1e363a8c731328b6cb175bb4019235e2d4873514d414be5def57ad5914
MD5 405e437ad57322df3292571c50862e66
SHA1 8956ab1a395e32b867a42322ea9acaba562ca096
SHA512 5811cd681bfe475cfe3651c2388567121c785448a1b3aa504f13a1436bef73a4d63535c8a8db9a447d30c476ee67e3892b96173ecf70615ccc5988f1e9380b28
SSDEEP 768:l/UxvxjgC+93LPnbOxsj/9OA9at01j0iq00+IaixxE75EBP:IZj3+93rKCHq00NaEk8P
TLSH
T11213BF71FCA59D33ACE2F285730A2397EFF45513C6C95A9089ED1A0D014B6AE170BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa229ffc-3eb9-4bc5-a1a4-eb2c04a25c21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aa229ffc-3eb9-4bc5-a1a4-eb2c04a25c21.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download