cb35387a3856f58096e179cb63b5d58aca598a8425a260a3de973d4f1d9ba11f

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 8KB
Sample261107-peqkdsxzhy
SHA256 cb35387a3856f58096e179cb63b5d58aca598a8425a260a3de973d4f1d9ba11f
MD5 2ec3c9a592c764682e6adde5d1e112c1
SHA1 9c3cba98ecb22518d9ae59733a97af264ae2cde0
SHA512 a8c68e23b7218ffc1aa1dfd44a39ef29a421fb237b776e39879f917347210ba65d819984ccfffd63def2bb7abe0b454e6a26d7fd6fb2e0f13d1abeb25cc8b142
SSDEEP 192:iCjRlBLKMT1o/fqKfu7D4nBBifPMi5/8+prm8HSlDlgLnBfTsPU3919CW:ioRdo/fFED4nBBiN50+prmxNlEnBb19H
TLSH
T168121AF41231103E82BB18F5B1EA7399B352820FE54AC451DAAC498E4BCBE867D16F58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2092	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{54F48734-5047-4FCE-8664-20A2AB945C0C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5784	msedge.exe
5784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe
1840	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1840 wrote to memory of 3656	1840	msedge.exe	88
PID 1840 wrote to memory of 4548	1840	msedge.exe	90
PID 1840 wrote to memory of 2092	1840	msedge.exe	91
PID 1840 wrote to memory of 4548	1840	msedge.exe	90
PID 1840 wrote to memory of 4548	1840	msedge.exe	90
PID 1840 wrote to memory of 2880	1840	msedge.exe	92
PID 1840 wrote to memory of 2880	1840	msedge.exe	92
PID 1840 wrote to memory of 5088	1840	msedge.exe	93
PID 1840 wrote to memory of 5224	1840	msedge.exe	94
PID 1840 wrote to memory of 5088	1840	msedge.exe	93
PID 1840 wrote to memory of 5088	1840	msedge.exe	93
PID 1840 wrote to memory of 5224	1840	msedge.exe	94
PID 1840 wrote to memory of 5224	1840	msedge.exe	94
PID 1840 wrote to memory of 2960	1840	msedge.exe	96
PID 1840 wrote to memory of 5360	1840	msedge.exe	95
PID 1840 wrote to memory of 2960	1840	msedge.exe	96
PID 1840 wrote to memory of 2960	1840	msedge.exe	96
PID 1840 wrote to memory of 5360	1840	msedge.exe	95
PID 1840 wrote to memory of 5360	1840	msedge.exe	95
PID 1840 wrote to memory of 4508	1840	msedge.exe	98
PID 1840 wrote to memory of 4508	1840	msedge.exe	98
PID 1840 wrote to memory of 2428	1840	msedge.exe	99
PID 1840 wrote to memory of 2428	1840	msedge.exe	99
PID 1840 wrote to memory of 3260	1840	msedge.exe	101
PID 1840 wrote to memory of 2028	1840	msedge.exe	105
PID 1840 wrote to memory of 4384	1840	msedge.exe	106
PID 1840 wrote to memory of 4644	1840	msedge.exe	107
PID 1840 wrote to memory of 2904	1840	msedge.exe	108
PID 1840 wrote to memory of 2904	1840	msedge.exe	108
PID 1840 wrote to memory of 4744	1840	msedge.exe	110
PID 1840 wrote to memory of 4744	1840	msedge.exe	110
PID 1840 wrote to memory of 5784	1840	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdcf81c188,0x7ffdcf81c194,0x7ffdcf81c1a0
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,17360472355211094602,12252677953853130342,262144 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:2
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,3236499315555818480,10855694472571624024,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=3276 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,9653548850760145009,9224733305882115159,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:13
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3364,i,6920058016476425790,215195521679454711,2097152 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3368,i,1838549808102785234,16724059322998455313,2097152 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,4912346201973791957,1878121156469763495,2097152 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,2447950679605775541,10807808124914322972,2097152 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:9
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,2366942827156699043,338995927264708385,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,15638996263748513843,13986957188859462658,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,13485844536374369559,6715649279360888814,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,13485844536374369559,6715649279360888814,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1116,i,11889209264160229900,8540817832965520488,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,13207357424072053253,18304592074935896104,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,7025015301460013782,9478829291082666346,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,376855660344089487,1308448940200394980,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,8607533916120636242,3578662021086871237,524288 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5660,i,6760117784984835273,5390477471237223297,262144 --field-trial-handle=2996,i,2707559279227716059,3169124977615654663,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5784

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

92d00cc3-1ec7-492d-b846-78eadc8f9100.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\92d00cc3-1ec7-492d-b846-78eadc8f9100.tmp
Size 35KB
SHA256 09b9cfb5438b3b4074a1c38a17b34b5fde621f125751631da6aadaf428bfdfdf
MD5 d8dbff1f0012dde9ab7031b07b848887
SHA1 f7cc236c73e4dfcf027bfa2c4048e2b37f1f57c3
SHA512 6019fd08cb187e8088d7ad33a80d511567f333fa486a79c8f9ee095b34cb3d45bd4b558ffff96c45c8f68ecb0e9d6feb74e0db46439be716b86b2cbeec040700
SSDEEP 768:4NJ3A29kgm1Jp0GrDmGA5b65Q92RQMPbeZ75EkeLL:4NJ3A2QtAF65dQldFev
TLSH
T197F2BF72ECA0DEB39DB5918172477255BFB88123D5CC869098ED6E1C01CBACE130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

894319c4-c173-4205-84f9-af95d06deaf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\894319c4-c173-4205-84f9-af95d06deaf1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93ccfae2-f7d8-400d-81c6-7cbc075cb1c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93ccfae2-f7d8-400d-81c6-7cbc075cb1c8.tmp
Size 11KB
SHA256 567b41a01515733535025ca74e5bfc2c33048eb5323f47f9c779ad62db179139
MD5 f477e594f0a106b7d54f36e40fb586fe
SHA1 709359a772600363e75d008bcf528697cbed1a08
SHA512 aadb04dad1af1994be8acb3ec5ac3b9afa855d999c5af7b8aa156f36387db5a3bd4c56adfc74b3b449ba281cf97d5cca00cf2a5d155ad8b94573f60183226883
SSDEEP 192:sxRvcRrbt/fsrVssyYhfzoA8p4Zy/g6+WNIY25PckGThIgDiJ:sxREpt/fsRssb2Qy/5I8Za
TLSH
T1B432B815AD28A97B9CC7D21DBB657F53D7FD5033A0951E48AAFC861C04EB6DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8d5c48ed05195f278fbf6f594294fb887913a46959ec6a87cbe6662252c25f84
MD5 e2cd6f5be7afe0d77e5ac0d54e1cc068
SHA1 791f78fc93e5f0cb84de24e8fe4c3a73d0ea6af3
SHA512 66257530d13e81fb35fe2e8925dc02812215c53d379ae919371eece3e9424e2ef9cadb77a624d4f7bcae4aac7cc403f511cfed1e769ac6afe97134caad51dd45
TLSH
T10EE0269495CEC32EE278644701FC630CC6E1365A93C87A6E9B59D4CC7203440B3A66A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 df0434fe4b010e5f011f8efee7e3702d2dc6d40bc4e42ecd1a9d637578ace295
MD5 dc9b42091cd9df95b2cd9646574f2410
SHA1 bc44c1035991e580e0c14b516fbf6d25f83add64
SHA512 1289c59f1be6d6093c1f6153ea78c12b58214b5103beb68b3ad332572a3c9f63667b9a41db8ebefaea4564392f7aa47409d5856799a98f0d4691bd6bbd5d35c8
TLSH
T10451648290B393B2FB57053D82DCDDFB3A344571599F9E020C98FAB6B78E799C100298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 712fcf364c9a8ea9b4270138a7287588b0309668a2d2c197ead133e5da3f94a9
MD5 4c35537a221adbb50706718c2f90dd9f
SHA1 567d7d7c6f88036b6700bdd5c30668465bd21e01
SHA512 0f85f405fbe578d0acf46e0ad1f8a99c6863ba8d9a7fd07d627c81b31aa120ea125ad5dbc0974a98066282d1b97685b9de19465470f4cb1cd98799ce1ea9898a
TLSH
T10D51668290B397B2FB57043D82DCDDFB3A3445B1599F9D020C98FAB6B78E799C140298
MD5 SHA1 SHA512 TLSH

Submit Download

3d76560d-21e4-4b12-ac4b-77de2b117bb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3d76560d-21e4-4b12-ac4b-77de2b117bb8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

26deadab-3d04-4089-9c13-c2abdb291291.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\26deadab-3d04-4089-9c13-c2abdb291291.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

3f0425f5-04c4-4709-87b8-8abf594303ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3f0425f5-04c4-4709-87b8-8abf594303ed.tmp
Size 1KB
SHA256 db5b53efb9a98118d47c5d2a554d5a6cb6b7ba04054686825ca72901bf35fb4e
MD5 0714ffed7fe46f2ab061722236b1b3d5
SHA1 1f18ff4665c9162c0c5add025f2f56292a905c04
SHA512 7eec734b08cbcab0e1c0fab4070830c66ec700f9e4c191c3ec0ed55385ce6f5404fdf4fc6f538c599635b6c62f2e76a6b6459bbb9eded7f8ec646e08aa111622
TLSH
T1F031A2F787B4857EDA1196F0AA14AE2FCE1D0515432C7C69C5E0AE2793F3471E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

f6ac6fe9-1711-4e77-8baa-06fd4b1532df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f6ac6fe9-1711-4e77-8baa-06fd4b1532df.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 d5a716860b62713f53485fd398399860b9b8c6e4959d1d267a8e0205a5d10104
MD5 2c097c3aeb01d599922c66a164f7a26a
SHA1 928199b2b2cec84e0f987f2d44668a5471450375
SHA512 1eca12d2b910f563e8101692fe26885bd0924a64990312a684fc69ec804114ef05e78de23af3643f12073f578c13a882cfdb4f97ac1f057a211bf5514fa67eb6
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWBroHro:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vt
TLSH
T1C6B2EA2F644CCB7E8FD00A9DAC596F977E9802C796588D4047FE984C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c17f86f1-bffc-4444-b5e8-c9a1ab1d0b6b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c17f86f1-bffc-4444-b5e8-c9a1ab1d0b6b.tmp
Size 11KB
SHA256 77db4843c212d748022a346c6a7820e1b8fd83ba40ba82ed53a3b4b4144c07b6
MD5 2373c8984463cd8df7cdf136855f87f1
SHA1 aa4ee0fd4d40e7c152f6be1f77aab8e93bade218
SHA512 3e326b1f40320bda6873646bc7f1620adb68d06c248a0527a8f9bb2698ccd49e76c16ca9504c662dda86cae8b9a282394ce29fa9e61a8563eaed5fa768411aee
SSDEEP 192:sxRvrRrbt/fsrVsMyYhfzoA8p4Zy/g6+WNIY2FnckGThIgIJ:sxRzpt/fsRsMb2Qy/5IYZs
TLSH
T1F532B715AD28A93B9CCBD21DBB657F53D7FD5033A0945E48AAFC861C04EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6369138-9a11-4fa8-9499-0b671badc21c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6369138-9a11-4fa8-9499-0b671badc21c.tmp
Size 11KB
SHA256 5b9ed78b9e18941d363808d1fe12f8f833792e8cd874d43e61f1152487d0f22e
MD5 88fcdfa0452a568054637a49bd0fdb4c
SHA1 d01625a2be3f7fb28a32071513d3af81d93df3df
SHA512 fa83236fad93715b2deb15a8cc468153bfddd1f8bff5d2ad160165ec11f5897eee117c6d69aa7a1aec32f3f2705cdc91018ccd01b6688a724c6aae399a209c26
SSDEEP 192:sxRvcRrbt/fsrVseyYhfzoA8p4Zy/g6+WNIY2FnckGThIgDAJ:sxREpt/fsRseb2Qy/5IYZQ
TLSH
T1D132B715AD28A93B9CCBD21DBB657F53D7FD5033A0945E48AAFC861C04EB6DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bb508ea-6b49-4b06-9e2b-2f82008fe607.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4bb508ea-6b49-4b06-9e2b-2f82008fe607.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa7f8e47-46f6-460e-a7e1-0aa1aac6b843.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aa7f8e47-46f6-460e-a7e1-0aa1aac6b843.tmp
Size 37KB
SHA256 01887c640cf04b4187d033def5de53fb7f4d509eee2c8c8d9cbb3862e728fdac
MD5 6590cee446a7ae75fff5947a65bda649
SHA1 a07f39b646107857d50dc4d67be66d95ce1c966b
SHA512 18b58d0ae7797f5bc65b89b222fabd7d6b47d257a0e45c55c274e95e0f680a6de4eb9f27c68c9ccede3e4f725fa98e93a09571b5bf7fc05dc5dd1c8bbd60fd0c
SSDEEP 768:gCFd33hwgG29kgm1Jp0LDmGA5b65Q92RQMPbeZ75EkeLL:gS33m2/AF65dQldFev
TLSH
T11A03BE33DC90DEB79DB59A81B2463255BFF58163C4CDC6A0EAD96D0C018B6CE034BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6dc1efd-cda3-442c-a177-51793ea4d503.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6dc1efd-cda3-442c-a177-51793ea4d503.tmp
Size 39KB
SHA256 c18baa9a2a397f67e73f708899b6f1e745a6baec6322a66008341a1144e2b212
MD5 d990cc278658edf3b076b20522aa46c5
SHA1 1c5cd2c5191a9cf92a2367085475340f6b0a906c
SHA512 9c9cf8761e88487a67574a9f221e379d0a8590a38fa8e452055f77d3d81899325108cb3f209391723633870e58820c217f80fad0ef383c3ef8fcff6b27e299b4
SSDEEP 768:/a/UxvxjgC+B30Kqgm1Jp0GFDmGA5b65Q92RQMPqeFj0O:/fZj3+B3GPAF65dQuFQO
TLSH
T1CD03C032EC94AEB39DF59180364BB35AAFF94163C1C996A049F97E1D06C768D430B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5c3908e-7a08-4825-a92a-8192e64373be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5c3908e-7a08-4825-a92a-8192e64373be.tmp
Size 35KB
SHA256 2088efa820a946b4944a8e12cf6bcbab7a1a56ad3da21e782ba2eed53a04bc31
MD5 9d1985ea697d9893fc860c666e2cefb8
SHA1 daf2c4298123b92dcf21be2c0294f5e1d2e14e37
SHA512 9de40d0277525dbd2179e049e32b01b475cdfb3084e1aac7180710f396750c8fc0c048a4b6481ed79e72bfa3078ffb091c49d66c16c0979e5a1df1959aea3c61
SSDEEP 768:ANJ372tkgm1Jp0GrDmGA5b65Q92RQMPbeZ75EkeLL:ANJ372AtAF65dQldFev
TLSH
T1EFF2BF72ECA0DEB79DB5918172477256BFB88123D5CC869098ED6A1C01CBACE530B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5e32b5d-4af4-43dd-9985-7dd085426423.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5e32b5d-4af4-43dd-9985-7dd085426423.tmp
Size 39KB
SHA256 020e3a7245c21c90f6f8a96852555f9253dab7c80b6e99e75b95de0e59ff8b29
MD5 24d3ddb989450679d7fb8f19e3cd7248
SHA1 619515ac8ddb8661bbd1ec23208f0b3514da96b5
SHA512 186c8785d35e18a0449519741d34de46e4dd0688aefd776955364c32afa24478d899b839a4635fd9ed551ca69fd73df7a39a8bb36f61bae701389a3227b30b39
SSDEEP 768:U/UxvxjgC+B3IYHugm1JpLtDmGA5b65Q92RQMPb7Fj0O:BZj3+B33q3AF65dQsFQO
TLSH
T19203C036EC91AEB39CF95280374BB35AAFF84473C1C495A049E96E1D06C768C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8012e486-24c0-43aa-a69d-024da3252b3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8012e486-24c0-43aa-a69d-024da3252b3e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download