983391614c92b7bce361c4f7b3d248c64768f72fa3745d29f412d7e9ba0f2d55

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 18:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 1KB
Sample261107-wwxtcsff67
SHA256 983391614c92b7bce361c4f7b3d248c64768f72fa3745d29f412d7e9ba0f2d55
MD5 7b52b022b704e123737ec577273931ee
SHA1 c425c0290ffa2c5411ab2ca1e528c4317aee4434
SHA512 596eb913329f6b3ddc68df3672a861ad999ed399d50757246f6919cd44d417e1c3eec5aba7f5e152cbacd276b61ca87f67b310056622fe29fdcc09e0f46b74ea
TLSH
T13531218E911B1CBF432642262717B0D99AA24B8552F32F4030CCFA2F4DD4519D3A7DBB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3460	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{6B3C0D4B-5F86-4597-9730-2DF86425ADC4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5096	msedge.exe
5096	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 1956	1580	msedge.exe	83
PID 1580 wrote to memory of 3460	1580	msedge.exe	85
PID 1580 wrote to memory of 4856	1580	msedge.exe	86
PID 1580 wrote to memory of 4856	1580	msedge.exe	86
PID 1580 wrote to memory of 4856	1580	msedge.exe	86
PID 1580 wrote to memory of 3352	1580	msedge.exe	87
PID 1580 wrote to memory of 3352	1580	msedge.exe	87
PID 1580 wrote to memory of 3952	1580	msedge.exe	89
PID 1580 wrote to memory of 3952	1580	msedge.exe	89
PID 1580 wrote to memory of 3952	1580	msedge.exe	89
PID 1580 wrote to memory of 5068	1580	msedge.exe	88
PID 1580 wrote to memory of 5068	1580	msedge.exe	88
PID 1580 wrote to memory of 5068	1580	msedge.exe	88
PID 1580 wrote to memory of 4240	1580	msedge.exe	90
PID 1580 wrote to memory of 4240	1580	msedge.exe	90
PID 1580 wrote to memory of 4240	1580	msedge.exe	90
PID 1580 wrote to memory of 2272	1580	msedge.exe	91
PID 1580 wrote to memory of 2272	1580	msedge.exe	91
PID 1580 wrote to memory of 2272	1580	msedge.exe	91
PID 1580 wrote to memory of 4444	1580	msedge.exe	95
PID 1580 wrote to memory of 4444	1580	msedge.exe	95
PID 1580 wrote to memory of 4092	1580	msedge.exe	96
PID 1580 wrote to memory of 4092	1580	msedge.exe	96
PID 1580 wrote to memory of 676	1580	msedge.exe	98
PID 1580 wrote to memory of 748	1580	msedge.exe	107
PID 1580 wrote to memory of 2224	1580	msedge.exe	108
PID 1580 wrote to memory of 4348	1580	msedge.exe	109
PID 1580 wrote to memory of 3596	1580	msedge.exe	111
PID 1580 wrote to memory of 3596	1580	msedge.exe	111
PID 1580 wrote to memory of 5036	1580	msedge.exe	112
PID 1580 wrote to memory of 5036	1580	msedge.exe	112
PID 1580 wrote to memory of 5096	1580	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff8597c188,0x7fff8597c194,0x7fff8597c1a0
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1728,i,5170097501756933585,7460935586921727870,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,10735913834141106302,9098390986968147280,262144 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:2
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,2531331992611430545,14176234547758239845,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10780458328093290578,9043998769913958140,2097152 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,7823799178138350468,17364484429534465960,2097152 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,10407686420189546252,5171246640496089928,2097152 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,14249729522088730462,16296418536037043564,2097152 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,6422891948704789536,5825964921196834773,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17968964570837517831,4648086814441440160,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7572325478398580593,7557347921525273651,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7572325478398580593,7557347921525273651,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,7951853726034052759,9740204517922319975,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,5375486620906964797,8664603222262342763,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,16446997595244148413,11874128916343512865,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,806557879054720617,15133061584610381519,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16201712795534798823,5463507513675474137,524288 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5160,i,1016857362065019886,14313269453192241405,262144 --field-trial-handle=2672,i,10428931941311831633,9113232654431975066,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5096

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3bf00b00-014a-43d5-8e96-1047266f3330.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bf00b00-014a-43d5-8e96-1047266f3330.tmp
Size 18KB
SHA256 f08df2b709518e86d7aa5953a99794fa76e1c0162ace872157a58279c7f8748a
MD5 2069f9552b551a1ca188dad1401a362a
SHA1 1df8023666e5b9b0b79078110558a0e9e2ef024a
SHA512 9cb9f100c70dec0c10db2c4fa0064f4c0e2b0dc8a31086d40d642bdd59dd77fc95cddcb49a4ef8b387cd394b42c9cc2e69e4ee5836c0af8436026ba988824255
SSDEEP 384:QQkUSv0sNHUcgtgTFnap5u8iI23iTH7vBEnsqIIle:40Q5YkIvTH75ELLM
TLSH
T1F4826D3668B86C2B6AF39511F24B3A179EB4C11BD7D92F84D9DD972C00DB2DC2307A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b6024d6-20fb-4af9-8749-bdd8d346b90d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6b6024d6-20fb-4af9-8749-bdd8d346b90d.tmp
Size 8KB
SHA256 ad1636cd16dc85bfea89b0baa4c61b92469242beae6be614a0fdc3225416cfe3
MD5 06683d47eb2b5489005e1a3557f3858e
SHA1 12fbb818be2add2bbe08ddb5e80b93533c9c227b
SHA512 eb7231f7d7347e73710479afbfc5504b21728cca3921c3e24d8d1a23649f980964f7671e5d259734609c40f0b0bd843e794ed419e098f87ba011721442a80355
SSDEEP 192:sONt6iDMQmiUytaGq5u88PI2mKWpuZqqbU6:sONt6lHGq5u8iI239TU6
TLSH
T1DE123C3668B8BC6B6DE3A851B58736174EA5422BDB897FC4C5DC162C00EF29C5307613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

1c51879e-d22c-4c16-bdb5-fac25f8e072a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1c51879e-d22c-4c16-bdb5-fac25f8e072a.tmp
Size 27KB
SHA256 553a9665eea9ff8ddb94bc366ab72509e0f1063e5b07ee79b1ef4dff9ea8c4e7
MD5 235df9568f74a67f38fbe188c2d01e5f
SHA1 0d372351c8a0009493a62b286365059ae8d6ca47
SHA512 ed5be2fac42f16b08003753a5bbf5e9592ba73ca0fb44c74d06fb0df378f0793d03da87478a779a99bbba6fe03b7530fcbdf4a79d1b639675906b3d572d43272
SSDEEP 768:NGyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH34roHZPls:NGyQRbrWvvlpZu1jaXKLf33DHZPls
TLSH
T139C2E92F640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30dd1683-7f3c-43df-b44b-6c3ceda5edd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30dd1683-7f3c-43df-b44b-6c3ceda5edd6.tmp
Size 9KB
SHA256 8f76ebefef0d274f766be197933707810fca1f3246e6033e45b71d165d7a7199
MD5 0dc6a51863e15ebe9417a7ed8bb60678
SHA1 e809f294dea112a1ac8866379169082d447442a5
SHA512 19b6e56595bbb4aa32e04fc260844b962ed281a6749c47d32093e7214a9bc5b012b48815bbd9703790851285326d4cdd23d654600e0ec7bd785faeb4f5eeec8f
SSDEEP 192:sxZLRbfWY/f8ss0NIdpdFHW6+WNGYaJGl+gIg5BJ:sxZLduY/f8ss0u3HbG6b5
TLSH
T1B122D8156E78B97B8CCBD21DBB15BF43D6F9503161A11E48AAFC862C04E7ADE124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47cfe881-d037-4610-a3b8-784933c15f18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47cfe881-d037-4610-a3b8-784933c15f18.tmp
Size 9KB
SHA256 977224b2081f1e0228d9a333c90fe73d9e3d813fca54fdf59d5c2ea755668e79
MD5 13c16951ee05859a2d0cf9b1cd8a411c
SHA1 790224ba11ba66b5e2105066164b5e7d6424733e
SHA512 f00b377cbeb45fca6fa7c4361d0ffd41d18e10fd89d574d1c98efce2db543a6a4f8f8e143d58a9ff3b74491736c83392b6301bfc6137486337344ff7ca9da08e
SSDEEP 192:sxZLRbfWY/f8sx0NIdpdFHW6+WNGYaJGl+gIgrJ:sxZLduY/f8sx0u3HbG6b9
TLSH
T1EA22C7156E28B57B8CC7D21DBB15BF43D6F95032A1951E48EAFC862C04E7ADE124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83a5658b-e2bb-4ddf-a71b-e0c77994e171.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83a5658b-e2bb-4ddf-a71b-e0c77994e171.tmp
Size 10KB
SHA256 c84b12cf895fdba9f0da9f643fee0a7cce2b333bcc28ad7adc5a1cdda6033bcb
MD5 b4c76e7b154823c1231d56e15e555091
SHA1 a10079b1efc65cd98e5a743f2a3cc2d93ac0c43c
SHA512 d4c3692245236fcf6dc47632082d7d3386ea946c9fcf4271128fa374e29b5e961c20195f924f93fc99b62476fe901c8bcc3e280adb4321e0910d12379d44d34b
SSDEEP 192:sxZLRbfWY/f8sB0NIdpHFHW6+WNGYa8pl+gIg57J:sxZLduY/f8sB0ulHbGobP
TLSH
T18422D8166E78B97B8CC7D21DBB15BF43E6F5503251A11E48AAFC862C04E7ACE124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6f3140e2ece866657f17f4386735fae9d32daa9a8d15c9cf95d122ce4d0c0676
MD5 358401afb1b4eb631f63d9fe354d5607
SHA1 f512fedc0e416739f2aa35f105de528497242296
SHA512 93f1f36dc7433302a3f287723111931211aa4010dea82811690dd9d9aa92ba3481538a73da09efd6c3f39040f1906621183d1a897cc578c071010fc52010019c
TLSH
T1B7E020D444CCCA1FD604655701EC730CD1D03A1BA3C06A8D2744C44C75C2548E7A7DE5
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 dca7f3c265a1bd1b5298b8bf0d92b78592f968f2b092dec807916b05a0eb682a
MD5 16029e8f8fddc4eba428e9dd67f492cc
SHA1 a2d85f94a880d4001c58eee4ba9ea317347c28cc
SHA512 4ceab4793538a37060c4359fdbf841975929b2c337d312dc998c484488cbd7b8e448de73b54df4c44b7bf377074f6bc443da38c0722a915f0aa801428f8dd324
TLSH
T1AB614E8458520C11FBAC91BCB3CF75CB32B45BB191A30E114FDAD8A5AB36F1B61140EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 baaed36a843ac08990a943d40d436a36c22c772fa7d1f680d32c68fc145a3e49
MD5 a61800a6e53265938c7495f57119441d
SHA1 c20a5f0fdf7f4da667af6c98e017a012e14d6f94
SHA512 29192d35eef5aae429a165958ecfa4ff2c7a8140df65d7f5a14d54933ede8871c4fee96d9b08ce348c95c25ff3557a3fa549c0e0b5db35356ea45303dd3b182d
TLSH
T169614E8459420C11FBAC917CB3CF75CB32B45BB191A30E114FDAD8A5AB36F1B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

2ee69d40-2db7-47a7-9bdd-d559929f18e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2ee69d40-2db7-47a7-9bdd-d559929f18e3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2a763661-4bed-4952-8bef-78bdbbb4eea9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2a763661-4bed-4952-8bef-78bdbbb4eea9.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

31e4585f-bfed-40e8-9758-d14282ae18e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\31e4585f-bfed-40e8-9758-d14282ae18e7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

900e4e95-7dc6-4f25-81ff-ee20dd890d55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\900e4e95-7dc6-4f25-81ff-ee20dd890d55.tmp
Size 949B
SHA256 daed73d274ddb3594d57729ab95c9f7479433d582af602ac9e41e9b1cac51dd6
MD5 9a9697fdc362c72465d5997d9d682669
SHA1 69940987b2e44116fba37f9e182cf2b8c07ca363
SHA512 4a09b256a3611150e1168fde63e2c84769403787ff540034cfd8b64c907274bcedb2952db73943f93f6f7d36791966f72898134620571f053d8583e8fb9e9534
TLSH
T18B117DB3C7D5896E890116F05A24AE2BCE2D0605421C7C1989D4FF67D3E3475D00259F
MD5 SHA1 SHA512 TLSH

Submit Download

b9b849c1-dd73-4b8b-a5d6-e7a430f69c22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9b849c1-dd73-4b8b-a5d6-e7a430f69c22.tmp
Size 10KB
SHA256 595e5076cbcdcc270dbfc7222a07c1ea6061b0f487c760660b3578210873640c
MD5 cee9053b893d45006307f782068ab13a
SHA1 23b325adb2bb2a3c569a329b02d3c01de20f1d0b
SHA512 cc92fb875f9e3385b2fc7f9f23d85f919ff08c22b77df46147a8cd2d3c3f71914d5d0774f3456c89d8a857fba6c52a99f2e6a0b3e77e1213ea0be21106b37d4c
SSDEEP 192:sxZLRbfWY/f8sB0NIdpdFHW6+WNGYafSl+gIg57J:sxZLduY/f8sB0u3HbG4bP
TLSH
T19F22D9156E68B97B8CC7E21DBB157F43E6F9503251911E48AAFCC62C05E7ACE224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfe26aec-fe64-460f-a0b9-378612251892.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bfe26aec-fe64-460f-a0b9-378612251892.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63976eb7-1448-4b1a-9276-f0cea94e7e1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\63976eb7-1448-4b1a-9276-f0cea94e7e1b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2d0bf0f-bc87-4ec9-ac3d-c7c69a0fe7cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2d0bf0f-bc87-4ec9-ac3d-c7c69a0fe7cd.tmp
Size 18KB
SHA256 c28a3be5355dd89eaa3ac300cf372730b271a64851780366ffb7cf37aa1fb166
MD5 7e1f50b8e2cc0f06685b23eeb334f5d4
SHA1 13bee002e5704067a183e80603028b86ee6e84ba
SHA512 c5e10071b6de057dd507df2b3e4d7d1eff7d3f4f290f9bda270c93b1887abe04fce03ca5a4216a0374e26c36af4a015486fe3caeac66f2aee0a4b2c78e5a5fcf
SSDEEP 384:DQkUSv0sNHUNgtgTFnap5u8iI23iTH7vBEnsqIIle:t0v5YkIvTH75ELLM
TLSH
T179826D3668B86C2B6AF39511F24B3A179EB4C11BD7D92F84D9DD972C00DB2DC2307A16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b376cd07-449c-4147-9f2b-c22954caf5ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b376cd07-449c-4147-9f2b-c22954caf5ba.tmp
Size 21KB
SHA256 03d245d49dc496b8021c160598f08591c3ee5d2b7da574fed30df361d3ac0bda
MD5 5de7346b51677da404727aa8fce11837
SHA1 bf10eb17b2787cbe40c5cea53fe602dc2a7ad62c
SHA512 82e6f61aada0148bf80d7efce634df61ee41367e84e1f8fb5f8b6d55816b97e03bf9f266251410a1a13d7f876d105d136ac5ca61a05bc074deb3bbc5480ad603
SSDEEP 384:fiFzQkUSvgzsN88TUNTUlIlcgtgTFnap5u8iI23nTH7vBEnsqIIle:qFd8Vwg65YkIETH75ELLM
TLSH
T14AA26C3358A8AC3F6EF79A10F64A3613DEB4816BC6D56B94E6CD962C00DB1CC1307A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20537a3d-0ace-4be5-8748-69a1799495e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\20537a3d-0ace-4be5-8748-69a1799495e5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f0f6747c-87a2-4ddd-a162-351be7620f0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f0f6747c-87a2-4ddd-a162-351be7620f0c.tmp
Size 8KB
SHA256 ad331735760922b742f9856c6823945708d226016deb33744f6e01aead602221
MD5 460bd166a2833bec2fdf552a44ee78ea
SHA1 3c9ad76c71a5c2c0d69990e2ffc6d29ea978c663
SHA512 9b83742455236f4661dbcd032ffae502eebc9be73c79db41da887051a688908259dcae9e52d7a79fe42f55962d4473854c2a3caa07414f5490bc9a0651a37f75
SSDEEP 96:PqONkjQsjpfwDISp5ih/cIPURHl8h4otop5mmDKBfPGxvw45RxmJm78lFLxT+XkY:SONj6iDCQmiUypaHq5u88PIUSq5HiU6
TLSH
T12E02F9396C787CABAEF3AD15B5473B275FA4112FE6952F84C9E81A2C00D729C1307523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 310b3ac7e2dc66a212d98983ee4d717eeaa1454d35e4f9d06d3ba4e9d736361e
MD5 baf35b361e6a8bb172f8d4f10ff1ddc4
SHA1 838cbb9b3f381cccb0ae5f561137f6a2088e4597
SHA512 20d03a8195071384fee339b8cd3604683aeb0a6fcdd851101c18431b59de34f2a4b1c56f6f6d0744040aca6ba0f43a5cb1a4dbcb4f744a436aa204123e3acc59
TLSH
T1A1414858A6FD1148B3B76E56ABF3A86D847FBD772E07D45E00110E8F0A66B40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download