cb35387a3856f58096e179cb63b5d58aca598a8425a260a3de973d4f1d9ba11f

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 8KB
Sample261107-wtawtafe79
SHA256 cb35387a3856f58096e179cb63b5d58aca598a8425a260a3de973d4f1d9ba11f
MD5 2ec3c9a592c764682e6adde5d1e112c1
SHA1 9c3cba98ecb22518d9ae59733a97af264ae2cde0
SHA512 a8c68e23b7218ffc1aa1dfd44a39ef29a421fb237b776e39879f917347210ba65d819984ccfffd63def2bb7abe0b454e6a26d7fd6fb2e0f13d1abeb25cc8b142
SSDEEP 192:iCjRlBLKMT1o/fqKfu7D4nBBifPMi5/8+prm8HSlDlgLnBfTsPU3919CW:ioRdo/fFED4nBBiN50+prmxNlEnBb19H
TLSH
T168121AF41231103E82BB18F5B1EA7399B352820FE54AC451DAAC498E4BCBE867D16F58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1828	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{253BE287-D497-4923-894C-BC71C7ED6542}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2192	msedge.exe
2192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe
4652	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4652 wrote to memory of 1340	4652	msedge.exe	84
PID 4652 wrote to memory of 3316	4652	msedge.exe	85
PID 4652 wrote to memory of 1828	4652	msedge.exe	86
PID 4652 wrote to memory of 3316	4652	msedge.exe	85
PID 4652 wrote to memory of 3316	4652	msedge.exe	85
PID 4652 wrote to memory of 3492	4652	msedge.exe	87
PID 4652 wrote to memory of 3492	4652	msedge.exe	87
PID 4652 wrote to memory of 1276	4652	msedge.exe	88
PID 4652 wrote to memory of 4068	4652	msedge.exe	89
PID 4652 wrote to memory of 1276	4652	msedge.exe	88
PID 4652 wrote to memory of 1276	4652	msedge.exe	88
PID 4652 wrote to memory of 4068	4652	msedge.exe	89
PID 4652 wrote to memory of 4068	4652	msedge.exe	89
PID 4652 wrote to memory of 3780	4652	msedge.exe	90
PID 4652 wrote to memory of 4004	4652	msedge.exe	91
PID 4652 wrote to memory of 3780	4652	msedge.exe	90
PID 4652 wrote to memory of 3780	4652	msedge.exe	90
PID 4652 wrote to memory of 4004	4652	msedge.exe	91
PID 4652 wrote to memory of 4004	4652	msedge.exe	91
PID 4652 wrote to memory of 2704	4652	msedge.exe	96
PID 4652 wrote to memory of 2704	4652	msedge.exe	96
PID 4652 wrote to memory of 4940	4652	msedge.exe	97
PID 4652 wrote to memory of 4940	4652	msedge.exe	97
PID 4652 wrote to memory of 4880	4652	msedge.exe	100
PID 4652 wrote to memory of 4572	4652	msedge.exe	111
PID 4652 wrote to memory of 4684	4652	msedge.exe	112
PID 4652 wrote to memory of 4936	4652	msedge.exe	113
PID 4652 wrote to memory of 692	4652	msedge.exe	115
PID 4652 wrote to memory of 692	4652	msedge.exe	115
PID 4652 wrote to memory of 2192	4652	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92207c188,0x7ff92207c194,0x7ff92207c1a0
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,788889665738411785,17601950601254824747,262144 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,12795137765345630172,2309952102033748029,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,15415939997610077665,16426994922586589553,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,10408754838512887840,5782130827821945436,2097152 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,14410557013194139061,3619977610064569137,2097152 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,14211732927729632133,6524817151428558063,2097152 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,6464886040378211012,4587094907059663049,2097152 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,18401657192295214208,13001999977210006871,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,4193871018667357311,10944710708209370811,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9468667079049985567,14508750262544890004,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9468667079049985567,14508750262544890004,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,2646294339683787698,9741640884098673315,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,12442448534292804414,3512881567006925520,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,18389093714397549264,14142845994908359784,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,15294226052373345439,5940534100300714528,524288 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5820,i,796816594569322934,3973088734416251854,262144 --field-trial-handle=2244,i,10203145210832165060,14097690936679301492,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

40ee35a8-83f1-49c6-bb6c-caac0838ce6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40ee35a8-83f1-49c6-bb6c-caac0838ce6f.tmp
Size 21KB
SHA256 60c2b059f579cc2fed5720eaf9bd1b61a5a732e34bde509c30ea3ee2e1bb368f
MD5 09da74cac15d928ff5aed2950f330b69
SHA1 72e6dc64baec00f0fc28e9e7934ab5a258a73e20
SHA512 c7531e025417f0cb2e0226fff07e0191e723a09c005c3546e727f1e2b7ae93a0cd3d56dc58cdda9d4f8eeef227a75541c4a1f6d7deeaa9790723931b7a59b84d
SSDEEP 384:WiFzQkUSv6zsNu8TUNTUlIl/wI9A8HOjTV8/dwC3wJr74H7vBEnRDzIIlw:9FdSPwgzunYAh74H75EFzLi
TLSH
T1EFA26C339C949D3B9EE3AA45E14A3207DFB091A7D9D66B90E2DD5A1C01C72EC234BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87f662f8-2400-41a3-9949-dd756dcb588e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87f662f8-2400-41a3-9949-dd756dcb588e.tmp
Size 18KB
SHA256 7ce8f1f464e8e73322acdb3359951079c4e1a03051af04ce6ba7e60685282992
MD5 06fd2102b9cfb3e832a0b774c08edb4c
SHA1 ad050b7fb1f458bec5e7547dd52d851f28611a79
SHA512 fea677471288bfec035d11af75022ff5f2019a714938757545c270c86f394732dba3232201abb2bba9663f964ce33754d1725ac87270fe58e8bc80e059e0e8d1
SSDEEP 384:JQkUSv0sNe/wI9A8HOjTV8/dwC3wJr54H7vBEnRDzIIlw:r0DunYAh54H75EFzLi
TLSH
T1CD829E32AC682D3B4EE3B101E14A35479FB4D167DADA2B90D0ED5F1C01CB6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

53a9de2d-651f-4ad1-b2ee-67e4f0ffb387.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53a9de2d-651f-4ad1-b2ee-67e4f0ffb387.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a58c218-f68b-44a9-83dc-582d63f2bcc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6a58c218-f68b-44a9-83dc-582d63f2bcc1.tmp
Size 9KB
SHA256 a44775eeba8b8646e88f91bd24a246842251fbaa2d966db6da08a340612b239f
MD5 c85d06a9bfbdb7641c1e8cff7a0c9c2f
SHA1 d3958da3ea677755afbe3b9111d05f8b432d59df
SHA512 f4436b596b9bc5f08211bf85880dccc248d7791a754f14c95a3bc10e769c9e16cd5352ba99c7434dd76d3c1ef6dfb4fa83ec286aa48b1a3282eed3b66422abcc
SSDEEP 192:sxZ6R3Wa/fWsWpcrIdpdCHW6+WNGYRPnHCtlIg5wJ:sxZ6ca/fWsT0YHbGm86
TLSH
T1E522B7116E28B97B8CCBD21DBA25BF43D6F9503291D51E48AAFC862C05E76DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7360dbf7-af20-40bc-9bec-1a6bc9f06a68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7360dbf7-af20-40bc-9bec-1a6bc9f06a68.tmp
Size 10KB
SHA256 acc6c94a56073f3478f21eb49c8d96e20f6a430c7f238afa3f125e7c930639f9
MD5 d1e586d64b1d3ee652d60c5040593e70
SHA1 6189802f55c973d3320f04514b2f54fee3e1509c
SHA512 4c26dbcd368fbbc425cac3ffa7501d2645aaea27d1d16c0be29f4475d751c62befa0807d3b6aa4552f69c21bb4c2cf6839f8107ec191359beb05a556fd7eabfe
SSDEEP 192:sxZ6R3Wa/fWsW9crIdpHCHW6+WNGYRPWOCtlIg5iJ:sxZ6ca/fWs/0iHbGmsI
TLSH
T1E322DA126E28B97B9CC7E21DBA25BF03D6F5503291911E48AAFCC62C05E76DD134740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80417b31-4412-4298-b3d9-01d2ce669a86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80417b31-4412-4298-b3d9-01d2ce669a86.tmp
Size 10KB
SHA256 3487fa7ae7ee3f1cb92ef88d40a53f3d58957d4a06fae250e24acacd248649f7
MD5 fa6d72789d2a1cccd62bc4628cce2f03
SHA1 1dd4aaa134afff61aa944605abc0a85c20d10b62
SHA512 65e3b8fd6c2cefcf29e0c7de1e89a9d0a4f28d7066b4a08a86a0681b233753c61a7b24b7377f335ce916429f29248431f453ecefb9cc2a6f8542679cfc65440b
SSDEEP 192:sxZ6R3Wa/fWsW9crIdpdCHW6+WNGYRPA5CtlIg5iJ:sxZ6ca/fWs/0YHbGmbI
TLSH
T16922CA116E28B97B9CC7E20DBA257F43D6F5503291911E48AAFCC62C05E76DD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 a9b8d7215bc58cdcaa3d16f829822211c938dc22c2c313c881283d92e9d614ed
MD5 79ecca37a26d7a5991a412db43cde285
SHA1 13b6c92b3b3e57ad74164dad733a0edfb6084671
SHA512 99a63a25e5a7bc8c644b67f38d30a4fb80049387ec39489e3472a245934cdc1c09ce7be9afa482da6278fca40ae1d9a081e7a5ddc0a3a5b6243a0f853dce6116
TLSH
T1F661728440610BE6FFA47935B5EA134B323E45A3D783AD8217ACE47768CB794B204C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 247cbbce9599393d3b6ae427cc5f8eed188f5c9a831d83d3bfcf6be2b5e3c168
MD5 4be0d677807c28dab78032edf9f0b7e0
SHA1 ab5b81489823ee29a42279b78443e8ce715d802f
SHA512 b0182670a166e9762edbbd0e58c57a1cf4138d0ab0fcff2d4841509f49ea812c5718661cf8ff3846f0206b72fa4085eaa607d319d244c6061a26cd2bfc451e31
TLSH
T16461728440610BE6FFA47935B5EA134F323E85A3D783AD8217ACE47768CB794B204C1C
MD5 SHA1 SHA512 TLSH

Submit Download

6375bf27-0dcc-409b-8856-7ce9cb9f71aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6375bf27-0dcc-409b-8856-7ce9cb9f71aa.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

71e45540-ef79-4bc5-a782-a51f6ba5c3f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\71e45540-ef79-4bc5-a782-a51f6ba5c3f8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

8e12d68e-ce47-419b-a2ae-5a31fa2f3d04.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8e12d68e-ce47-419b-a2ae-5a31fa2f3d04.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cc0bcf41-4fc3-408c-9aca-27dfc9f7b114.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cc0bcf41-4fc3-408c-9aca-27dfc9f7b114.tmp
Size 949B
SHA256 ed1522404fbcff129847ac3216b0a00ccb643fcd213631d57ee7206df0f20519
MD5 222f21ea3aa20dfac71901b69d499dff
SHA1 23df585e93eccd44c8ed9135c87295312ba08793
SHA512 e650154c39c389175b0b7f62c67b77246a955c94be8093a0efb0742f958eb2edf7208ad3fedcefd56c06b7d8c21b3d14a242447b4b2e035855241ab08e26066f
TLSH
T10A1190F3C7D5956E890116F05A28AE2BCE1E0605421C7D19C5E4FF2BD3E3475D00195F
MD5 SHA1 SHA512 TLSH

Submit Download

ac6d36f8-393f-4010-9d3b-eaaf3e305e9a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac6d36f8-393f-4010-9d3b-eaaf3e305e9a.tmp
Size 9KB
SHA256 80d05f8e013b7e41ef632ebf0016602508845a1f8893ae40177fd91e96eb241a
MD5 399bb07dba413f76b4352a91d478b768
SHA1 ad33fac64ffc00bee53adce5ec7485c83b53fbf2
SHA512 7abb8c113995126df78692215efec7b9d0144574329ef995107d8b364598c45d9f4995ae3f43f094aeee40fba1cc011651edce43d10a3e1399d25408377a6e1d
SSDEEP 192:sxZ6R3Wa/fWsDpcrIdpdCHW6+WNGYRPnHCtlIgrJ:sxZ6ca/fWsu0YHbGm89
TLSH
T18D22B8116E28B97B8CCBE21DBA25BF53D6F9503291D51E48AAFC862C04E76DD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6b7fd86-305c-4f1a-aca4-cb99540762fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b6b7fd86-305c-4f1a-aca4-cb99540762fc.tmp
Size 27KB
SHA256 caef48d2221a9f04bb0c1796cd5012aa6d49d5820e24acdb7ee1abcf0074c0e6
MD5 43104f5a3a61ef2667fe4ee6e01f198f
SHA1 c8e9e86d8fcb8f7074a07ada8d65b6f6da907c28
SHA512 9dbcdccf618dae4021740d281fd10bdd7fa84a8a8adab8cd12415f58df27e4e758dc9a09617f582e478c7726c620833723e171524da52cf65ace5faa2c1b6c9b
SSDEEP 768:K0K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k35roG+bu:K0K9uzYWvcQWsu1ja0HL7Q3yG+bu
TLSH
T173C20A3F640CCB7E4FC01A9DDC5A6F972E9802D7A6688D4047FE984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be099a0b-efe4-47ae-90b9-71b06bebfa4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\be099a0b-efe4-47ae-90b9-71b06bebfa4c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b704ff69-dbe1-4739-b937-0abea9c1da4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b704ff69-dbe1-4739-b937-0abea9c1da4e.tmp
Size 8KB
SHA256 e301c97b83b17c64de63f69ac7ba92f72d8172a143b35dd58aa1ac721a85ebda
MD5 8d8dfe7902e14175ca9960b9220248b3
SHA1 ff1f872d5bb07c274dcae06cedc9a31ed653265b
SHA512 c71bebe4391fc215f154ef2a0dc6c80eba1728b2c57b395cb0d8873380a3658455f8e4c06fbff8ae6044e0e6e9db792bb37417563dcf30879ab52824b48a2873
SSDEEP 192:SONe6ygpQmiUyG6tOCTVgj0+FdVmOzPtHU6:SONe6lHCtOCTV8/dwAdU6
TLSH
T1A902E735AC683CBB8EF36E45F48736179FE4116BDA962B90D5E80A1C00D766C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eeca0a4c-f7c7-44e7-9ca0-9d109a361164.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eeca0a4c-f7c7-44e7-9ca0-9d109a361164.tmp
Size 18KB
SHA256 3295f4a8a27ddc3fb45dca59970be41f11359f808ce0b2525aa58cefc9c8b8a2
MD5 92ae0f1c99f363b83eb1b71b43eeb058
SHA1 6c138069f132b17a141c65a8e20a5f62f8abb1f9
SHA512 35561a0c7ed776bc9482a74c30b09f14f21081fffa5321663f6ea51e59120503e895e5af5970d813a4661b158910357434a5bb591fbc14a045472839dfd2598a
SSDEEP 384:AQkUSv0sNeWwI9A8HOjTV8/dwC3wJr54H7vBEnRDzIIlw:o0ounYAh54H75EFzLi
TLSH
T18E828D32AC682D3B4EE3A145E14A36479FB4D167DADA2B90D4DD5B1C01CB6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88620af5-6fef-4d1e-b5f8-b814c0d58588.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\88620af5-6fef-4d1e-b5f8-b814c0d58588.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fc392797-7aae-426f-b801-6419af1cf62b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fc392797-7aae-426f-b801-6419af1cf62b.tmp
Size 8KB
SHA256 a92add40fd542909af3e48568b95b4a9c3dd13f6f8a412b0a68e9de98380bf8f
MD5 e2915381b68197c88f79ee54fe322fa6
SHA1 d4d4f448e4139aea46f8f6ab0ca651f05604946c
SHA512 974d1fe908a026150aba91ec7789e7b5859474b284f7ed744cf4920dcbdb817a1c926a508633eaa29540a8dcdfbae1d4541d9840f234cc94386e46ecac0bf40b
SSDEEP 192:UONP6ynQmiUyT61OCTVgj0+FdVmCggFJSJri3UbqjU6:UONP6a51OCTV8/dwC3wJrr4U6
TLSH
T19F12F836A8686C7B5DE27545E48731139FA48267DE8B3B90D1EC1E1C01EBA6C234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1664f4c7c02b471d8c8c6cb3e208890813877cfa3ab433d6496de6090ee955f9
MD5 9c9a85b3735ae3c7b2154307551df713
SHA1 94f9716f415c0f7dad752a16573936332bd65275
SHA512 ce006411873d56224e606739797722969b1cbabcb955ed5082dde2df106e7a5e9a9af71417c61876ebbdb5ab27a2c15f32e5af1f156d9bc2fb12e54b2492d0fa
TLSH
T150411D58BAF91108B3B76F569BF669AD487FB9772E46D04D10010E4E0623A40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download