462cf53dc4c057cc812a8a0c74eb0878d6dd33d946ab33f0c9564affcbfad027

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 138B
Sample261107-pgx29ax1ex
SHA256 462cf53dc4c057cc812a8a0c74eb0878d6dd33d946ab33f0c9564affcbfad027
MD5 3dcd452a1c8eaf938aa0682f21b48f7c
SHA1 33632a1c516de6712eb71f495e0a6ba863eb686b
SHA512 6ab1cf0249ee1331152dd9c64deac4b063d6d034e869e4e21534a8c87373ff994dc0b4139dfbd9d26bb544649e73b69635682f1a294bfc89afd4c8718986995e
TLSH
T1A5C08CA000D02000C3007A98CA82E64850F93A2E2D5A096B32802577A4E2104C226280
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4536	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{7F46DD1B-AF3E-4D63-9C07-74150626E148}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 1604	4848	msedge.exe	85
PID 4848 wrote to memory of 4536	4848	msedge.exe	86
PID 4848 wrote to memory of 1716	4848	msedge.exe	87
PID 4848 wrote to memory of 1716	4848	msedge.exe	87
PID 4848 wrote to memory of 1716	4848	msedge.exe	87
PID 4848 wrote to memory of 1428	4848	msedge.exe	88
PID 4848 wrote to memory of 1428	4848	msedge.exe	88
PID 4848 wrote to memory of 2476	4848	msedge.exe	89
PID 4848 wrote to memory of 2476	4848	msedge.exe	89
PID 4848 wrote to memory of 2476	4848	msedge.exe	89
PID 4848 wrote to memory of 1336	4848	msedge.exe	90
PID 4848 wrote to memory of 1336	4848	msedge.exe	90
PID 4848 wrote to memory of 1336	4848	msedge.exe	90
PID 4848 wrote to memory of 332	4848	msedge.exe	92
PID 4848 wrote to memory of 1720	4848	msedge.exe	93
PID 4848 wrote to memory of 332	4848	msedge.exe	92
PID 4848 wrote to memory of 332	4848	msedge.exe	92
PID 4848 wrote to memory of 1720	4848	msedge.exe	93
PID 4848 wrote to memory of 1720	4848	msedge.exe	93
PID 4848 wrote to memory of 2208	4848	msedge.exe	101
PID 4848 wrote to memory of 2208	4848	msedge.exe	101
PID 4848 wrote to memory of 5056	4848	msedge.exe	102
PID 4848 wrote to memory of 5056	4848	msedge.exe	102
PID 4848 wrote to memory of 4608	4848	msedge.exe	105
PID 4848 wrote to memory of 1580	4848	msedge.exe	113
PID 4848 wrote to memory of 672	4848	msedge.exe	114
PID 4848 wrote to memory of 4116	4848	msedge.exe	115
PID 4848 wrote to memory of 4148	4848	msedge.exe	117
PID 4848 wrote to memory of 4148	4848	msedge.exe	117
PID 4848 wrote to memory of 4440	4848	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc8880c188,0x7ffc8880c194,0x7ffc8880c1a0
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,13740065943996250778,15283608255529810530,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,7884608336132897840,10832502135921829281,262144 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,1425133437259551950,5431550631318885458,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10242805928629500009,4665485079267296857,2097152 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3392,i,14601196327189201026,15583783790112658410,2097152 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,16406019760700240892,14823834688555006753,2097152 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,6558163987429591168,4533557744457897385,2097152 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15009349062059637731,712117779361057543,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,10113453939005535923,16815118508957484399,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,11838289529761309546,6918791787932362076,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,11838289529761309546,6918791787932362076,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,7664129841451417557,11440854864919078736,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,14615888221930491520,10498596510723474779,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,13445938650431446434,17560576155694340034,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2988,i,977050768493858825,11564310675582071928,524288 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5820,i,14661069830088539375,8148659318718836144,262144 --field-trial-handle=2312,i,9304574357647022856,2922569706686569231,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

023166ac-50db-4d5f-a399-c27a3dd72a9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\023166ac-50db-4d5f-a399-c27a3dd72a9c.tmp
Size 8KB
SHA256 05424ac9e3af46b44456afb87ab7727375929ad7c4b7ed696a016a92f0d53b11
MD5 58dd8284d9e93b787da85e66939b654c
SHA1 854623e5a0dc9909716f36b453d33a3c5223867d
SHA512 c78d37026495ca392cdf2c2ce37dfc2e249c8c0a19343a1289d9dbef0a4083fa1e757c97a27bfdd18959402486962b18a917c7aed0b279fb114659a6194ccdc9
SSDEEP 192:+rONyD6y+oQmiUysosq+TOCTVgCu+FdVFnR0eiGnx3Ux0qQU6:+rONyD6ZIpPq+TOCTVpBd7GexixaU6
TLSH
T111120935B8686C7B5DE3A545F08731179FA48267DA867B90E5EC5F0C00EF6BC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4021035a-87f4-4678-9eb1-9c22967ebfb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4021035a-87f4-4678-9eb1-9c22967ebfb0.tmp
Size 18KB
SHA256 ed845749b2ea598630634b65acb43eac2e38b8b80da9ffff2b8d314bad1eb30e
MD5 32c67e4d3a5482f16f36d220042cb118
SHA1 72a40c7bb21e2dedb3c05615afe6bd527b295ff8
SHA512 7bd63e37261c3a17c47107cdec16e496cd91bcc6ed483ec06198ac3d1732db4ef4d8ad29ee5268806d620ac1e5880fc4799a052b72668290f011a87705c16f2d
SSDEEP 384:V7QkUSv0sNuGUwGSDsbiWWK+hOjTVpBd7Gex7xaH7vBEnWXbIIlM:30FznVfwH75EWXbLC
TLSH
T197827D31B8382D7B49F3A105F14A36179FB4D157DAD92B90E5ED8B1C00DA2EC234BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6185a235-ebc9-4d9c-853d-1dcec05844e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6185a235-ebc9-4d9c-853d-1dcec05844e5.tmp
Size 21KB
SHA256 4faded3daf52fab130579c338226543ebcc30712018f8bd1218606cfe7ac728b
MD5 a0de4a73437ee46c9b0f4cce82b0e43f
SHA1 86d0c4295cdc2afcc1a9dd10d5a318321731b4c0
SHA512 4468744f74ae9e17b73b3248aa2d6c377581e17e259e7e36fdf076b0482c598319e3d27cd215a43b18551716bfe72ea3745eb9e4a445360603c43358944b0b8b
SSDEEP 384:c6iFzQkUSv+zsNuG8TUNTUlIlNwGSDsbiWWK+hOjTVpBd7Gex7xaH7vBEnWXbIIC:wFdeUwgJznVnwH75EWXbLC
TLSH
T1B2A26D32A8549D7F9EF3AA05F14A3217CFB481A7C9D56790E6DD8A1C00DB2EC234BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

39a730af-c283-4482-9d01-1dc062e21e65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\39a730af-c283-4482-9d01-1dc062e21e65.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5473c8d7-5f17-4d4e-b882-d1cddb1ab67f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5473c8d7-5f17-4d4e-b882-d1cddb1ab67f.tmp
Size 9KB
SHA256 ad787e3ab5d90a8e90d26699de92b519c673b29eb83fda247554fec2e4c48ae3
MD5 85a173c6c581d137ec8f1de1c64586a6
SHA1 036a6b05244c3014d74a76829b11eda16bcdba43
SHA512 d706269540160b9a4cdf1df1f24a22555b9c56a63816341b65f44863ff0b7df9ba4acbb408ad3f97953384ae4ba9ade49d4de5f25cc5aa1c61607bd0d250933d
SSDEEP 192:sxZPHRtWPv/fv8sbSps2QIdpdxHW6+WNGYRPnZHz9IgrJ:sxZPHSPv/fv8sbWs2xHHbGmJN9
TLSH
T12722A8126E28A57B8CC7E21DBB25BF53E6F95032A1D51E58EAFC861C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ac85385-9c99-4023-ae4f-29b88b6a4a04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ac85385-9c99-4023-ae4f-29b88b6a4a04.tmp
Size 10KB
SHA256 56203767e8f913569709b9fa932aed1b33a1073c28c6bfabccbb530c8df01fe8
MD5 0baba0a1cc27f2d80e5c14e19c1e6d8a
SHA1 a2591bb810d4ad7e6dde860df929e0b4feca6108
SHA512 82fe943d2fae9ccd4e95683264f5cb050ef169f8071dc83863bfd2450d0b0d5cca0e8b33a4f821d95088034271e60c0466e96a97ce098ca46c2d4c5aae059a4d
SSDEEP 192:sxZPHRtWPv/fv8s0cps2QIdpHxHW6+WNGYRPbEHz9Ig51J:sxZPHSPv/fv8s0Ys2xRHbGm8NV
TLSH
T17122B7126E28A97B9CCBE21DBB15BF53E7F9503291D11E48AAFC861C05EA6CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8221f319-9e7a-4b60-9fed-9930241f3c59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8221f319-9e7a-4b60-9fed-9930241f3c59.tmp
Size 27KB
SHA256 6f933ea5bad4fd96e0e9306c30f62b4f0bbd7c1efa7ef772a2a8be0da7dd6335
MD5 c2b5c8e07d8ae4a54016ebc501fdac3f
SHA1 36bae3704b204e30ecc3c12443b30a0519b58af5
SHA512 7271c0bb02852bb680322ef1db37c9c3c3df6a99b9d07f70ee948b9c9ec42004ef6eae01c76280136156088a9fc3de80ae32c552a7243597b7c07c8cac8f5c9c
SSDEEP 768:3bK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Nro9+ENm:3bK9uzYWvcQWsu1ja0HL7Q3m9+qm
TLSH
T191C2FA3F640CCB7E5FC01A9DDC5A6F9B3E9802D796584D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93fb5067-0a55-48c5-9c4d-141ded47b4de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93fb5067-0a55-48c5-9c4d-141ded47b4de.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c0d26d865bde89c9f53e28af0f51185b01b11595d333693e713b6736016630e9
MD5 d816a8b2254a88fa71526227bdeb4020
SHA1 482f1d4dc8c0e5c379165014675b2c8e101f4247
SHA512 6a2f93f5cb3287b16febd5975fb2dae4a0612fee064ff961589361d031cc605bcc68d649b6ddc42db6bd61847ee872e0163390cace376807a7b7f66bed08d049
TLSH
T1D1517148E461B1B0F7F8D47386D521A7BB374780BD435E1E29E6D8BE888771561A3078
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 aa96ba49df388411295f64c54096f09261e929d1168b5a4e66fcbc54b54de2a7
MD5 c0977bb9109ab62cda57af9a3de9df87
SHA1 55cc78a4e8a1560ce78d78ea5948e1191cc8eb93
SHA512 b8b8ecca350c5911f12b39716eb72cfca4dbad83038229488fbf698742de3b46bb87d704a1cc3bb375908148939a600cf11181ac1b4a87efa8d45d770f8551f6
TLSH
T1FA51A448E450B170F7F8D07386D521EBBB374780BC435E0E28B6D8BE888771561A3078
MD5 SHA1 SHA512 TLSH

Submit Download

143cacc4-ca29-47df-a47b-8648801cccc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\143cacc4-ca29-47df-a47b-8648801cccc0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3ea3e4d4-8a35-4aeb-afe2-4c5c0de6e30b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ea3e4d4-8a35-4aeb-afe2-4c5c0de6e30b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

686befc5-b230-4203-9188-d5602b1598ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\686befc5-b230-4203-9188-d5602b1598ac.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

819441e9-d5bb-4167-ae83-a153a723cd35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\819441e9-d5bb-4167-ae83-a153a723cd35.tmp
Size 949B
SHA256 c30ffe808f693a0b89a9311c9274ff1668a032262d857a1bd5beac75d94cbcbb
MD5 da6980eb1e16c42c51343abebde7c311
SHA1 ace1bf862a8c371d7ea6b2b40936ebff81b70b7f
SHA512 663af12975ce25d83ec8960b8c1fd4a663365662d7fd440fba4676b8434ffeae52732841966f5bd2f69d34197d8071c331cb9a07de4be3859da5633a4c2a25d2
TLSH
T1C5117AB3C7D5956EC90156F06A28AE2BCE2D0A06422C7C1989D4FF2B93E3476E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c22c94eb9f76df3e4e9bf14866d8e038e34ed830e32bbbc36e6e9dbf99287c22
MD5 8265201a97ae9fd0e30c665c240ce93d
SHA1 102ce32cad64494f9226c589c4dab1e1e2604bca
SHA512 06cfccd201337f23da1fb630eab56bb03a310b27d44f4889e14f98a64dfb103ba46ddbe2e7168daebb23511ad86cf80de374ea61e2eae842ac5d93533900ce7b
SSDEEP 48:K0mImYo3YohYo8YogYo+YokYokYodbYooYofYoQISYo4YodK9Yoc1YoeYodxYo2G:K0m2J2KKcK68AKNi2O9uKmUX
TLSH
T10DA1D04131AB024079BE358991B98B1A524235B3355CF67BFFBD00B24EABE440DFE8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2b4490f-7856-489a-88aa-154fcb91ee50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2b4490f-7856-489a-88aa-154fcb91ee50.tmp
Size 9KB
SHA256 da1f027c7e89540b47ba00fdb778638d0d7b7efcb600400658451f83db34294e
MD5 047e532a5669dd3220d81ab39cc5d04a
SHA1 c285ead7a95a2f027fca58cd7a5a811673ca5fe7
SHA512 c06b38526cd6ef279d58bb4792d3ae6fe9a7ccc8bc19495ec84b68558a647f3555692175659666992457b303bbf9fe777d21e46a61ca953afe90fcce40a24a70
SSDEEP 192:sxZPHRtWPv/fv8s0Sps2QIdpdxHW6+WNGYRPnZHz9Ig5nJ:sxZPHSPv/fv8s0Ws2xHHbGmJNj
TLSH
T11522B7126E28A97B8CCBD21DBB25BF53E6F9503291D51E48AAFC861C05EA6CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0b6b7a1-3569-4a11-90dc-611ce2bf7d05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0b6b7a1-3569-4a11-90dc-611ce2bf7d05.tmp
Size 10KB
SHA256 6f08fc280dc4b40da53e98ccd5915978a9216356d6cfc8393d749cc8b21f91f2
MD5 f98e13b8286f8cba0f939b39b5f56b39
SHA1 07946405a256252808baaf0e082d055433b3f34c
SHA512 27d72988ee2b693fa218581c61a9986af5199c1313deac9a5c4a47a19ad26e481c68f0e5fc6f279d82e25705e33a1fc8c6d005cb62cb1472287ada88ad9ee2f2
SSDEEP 192:sxZPHRtWPv/fv8s0cps2QIdpdxHW6+WNGYRPJPHz9Ig51J:sxZPHSPv/fv8s0Ys2xHHbGmpNV
TLSH
T18922B7126E28A97B9CCBE20DBB15BF53E6F9503291D51E48AAFC861C05EB6CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1069d7db-474c-4c1d-9d17-60cfb3d61f08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1069d7db-474c-4c1d-9d17-60cfb3d61f08.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8183f3e-29dc-49d9-8127-0fc66862bf0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e8183f3e-29dc-49d9-8127-0fc66862bf0b.tmp
Size 8KB
SHA256 9bd0272a19daebed5392c56acb0c1aa54a80195bd2208437dbe07975f78d565e
MD5 df62f7be099a0b4e3ee97435a73d55c7
SHA1 e6c856441e026ca17022ebd21230210158542bd5
SHA512 f6c55db187b5fb547d99406b1f55e051ae8bbecf82004e06ecca9588e9b9c1f8afa8c33154c7c965a4e55adf949b6482883a3211d82946609798c6b9d60bdc4c
SSDEEP 192:SONP6ygpQmiUyscsqtOCTVgCu+FdVFnR0KzPx+1gU6:SONP6lHpbqtOCTVpBd7GUx1U6
TLSH
T12102C835AC782CBB8DF3AE06F48737179FE4116BDA952B94D9E81A1C00D766C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6328dee6-9534-4b78-949b-7cc6cb9cc5ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6328dee6-9534-4b78-949b-7cc6cb9cc5ff.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fdb54206-19d9-4010-82b1-1ecc2637123c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fdb54206-19d9-4010-82b1-1ecc2637123c.tmp
Size 18KB
SHA256 5412abae152b16b603a576ba789721c068e1517c6f10554068cd409a30b40b78
MD5 971eaab55c840edd1a0b8fcea41a552a
SHA1 c438303fbd5f01f2779cbab023b739725962ab51
SHA512 16dadecc41193f2ff50d50ef8b545417621464c60c619dc1f1345e01c2a0af214c04f4b4a4a9ceaf5cdac80a515673ff47218825ec7aae829a1483f9005f2437
SSDEEP 384:k7QkUSv0sNuGNwGSDsbiWWK+hOjTVpBd7Gex7xaH7vBEnWXbIIlM:c0UznVfwH75EWXbLC
TLSH
T127827D31B8382D7B49F3A105F14A36179FB4D157DAD92B90E5ED8B1C00DA6EC234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1018ea077ff63b4611345dae737649a4fdc84d2f66c12e2fb2b36c171956f6ad
MD5 cf4e08b64383fb8287903d1a090cfa9e
SHA1 0922faa21f08cc5edbc5d9d18194496e83cd7a57
SHA512 6f9dba34cd4022ab7540499e58ad011ac6d04c1fac01e41e0260bf1df3912ab49c0beb9d4310159b83ad886a7d4579926f695851326cde87b0f5e5323e7aedfc
TLSH
T10941F658B6F90148B3776E56ABF7686E44BBBD372F07D49E10020E4E0663A40D871737
MD5 SHA1 SHA512 TLSH

Submit Download