5a6b89009787b7b0c3f9d16f97c19766da53c8701d3370d8c307bc8ed2bf9c2f

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 06:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 57B
Sample261110-gx2rdagy6x
SHA256 5a6b89009787b7b0c3f9d16f97c19766da53c8701d3370d8c307bc8ed2bf9c2f
MD5 5092663d7adc36d65920d8de68d96030
SHA1 b39cb27a0cbca2f79aea696b4206666c36ab3367
SHA512 7c57f86b21a76a3567b0f8e93415d8ca8fb78ca57a3e1ad4cabbc58e953ec076d9046f6bc5bcfc3b8db43cc15e69ee83be99be5afeaa0b08c025333398253eb7
TLSH
T1A69002DA6151010C69201BF44DD34298490DD3917D12995419D55C7C5080309DD173CA
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2608	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{785C5180-9B87-4498-B14E-2E8FD525C055}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4708	msedge.exe
4708	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 4656	4540	msedge.exe	85
PID 4540 wrote to memory of 2608	4540	msedge.exe	86
PID 4540 wrote to memory of 5172	4540	msedge.exe	87
PID 4540 wrote to memory of 5172	4540	msedge.exe	87
PID 4540 wrote to memory of 5172	4540	msedge.exe	87
PID 4540 wrote to memory of 4484	4540	msedge.exe	89
PID 4540 wrote to memory of 4484	4540	msedge.exe	89
PID 4540 wrote to memory of 4016	4540	msedge.exe	90
PID 4540 wrote to memory of 5180	4540	msedge.exe	91
PID 4540 wrote to memory of 4016	4540	msedge.exe	90
PID 4540 wrote to memory of 4016	4540	msedge.exe	90
PID 4540 wrote to memory of 5180	4540	msedge.exe	91
PID 4540 wrote to memory of 5180	4540	msedge.exe	91
PID 4540 wrote to memory of 1912	4540	msedge.exe	100
PID 4540 wrote to memory of 5156	4540	msedge.exe	101
PID 4540 wrote to memory of 1912	4540	msedge.exe	100
PID 4540 wrote to memory of 5156	4540	msedge.exe	101
PID 4540 wrote to memory of 1840	4540	msedge.exe	103
PID 4540 wrote to memory of 4380	4540	msedge.exe	112
PID 4540 wrote to memory of 3804	4540	msedge.exe	113
PID 4540 wrote to memory of 4464	4540	msedge.exe	114
PID 4540 wrote to memory of 4480	4540	msedge.exe	116
PID 4540 wrote to memory of 4480	4540	msedge.exe	116
PID 4540 wrote to memory of 4708	4540	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb33a6c188,0x7ffb33a6c194,0x7ffb33a6c1a0
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,711415923154025020,17933675521261372545,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,8836055705567516892,4937453115582456939,262144 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=784,i,5161091752750763199,4790887068426285977,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,13784229160926118824,5175303769709723355,2097152 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,5694826216336788625,18026398096431887521,2097152 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,12262150862366331792,18125708671572144095,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,8506610472825752358,167185866115911897,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,11169436934289667215,10475957969405711452,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,11169436934289667215,10475957969405711452,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,633486728060215991,2360577195639227803,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,14099271100796733739,1511715224452580150,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4308642096295899472,8935817648116627207,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,2803495510153260020,8663044130153101746,524288 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,7608833369063859128,3017565635466853511,262144 --field-trial-handle=2200,i,7869363028450024635,14545264882665580663,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4708

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

00087c61-1c8b-4916-82e1-0cb12e70c30d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00087c61-1c8b-4916-82e1-0cb12e70c30d.tmp
Size 26KB
SHA256 34d429915841898e82df29437e01f3391d419781599a79363c782d51eb909331
MD5 c7bfcff6161762a4aede29520208d695
SHA1 b2247733c185571e96ba27e11592b5604a4e7f0e
SHA512 0c4c8e34cd0338951226c388c2a61947addf6fc4c47b009d4ac075dd191b1e4c99c5bc43e9ad55bc630b4bc732b130adc06dce446e199b83e0b4afffb316c301
SSDEEP 384:ngiFzQkUSvj3sNj8TUNTUlI4x5mg8O3KzfMBVgrCioFl/OA6vaTZcSgL/7IzkIIC:7Fdj3qwgZS/BVgwFgzvaTZctLC
TLSH
T1FBC26B36E894DEABEDEB8A91E74A3647EEE04253C6CC4AC4D5C95D2C00DB1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52c7a2c3-5133-4b9a-809b-d6ae24839c4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52c7a2c3-5133-4b9a-809b-d6ae24839c4a.tmp
Size 26KB
SHA256 068869e4f76cc07158207eb95140b89b0b3dfb2aa53c890ddc91bef66f9edaa9
MD5 ba601f372083b88f27bebd4d807c4f95
SHA1 c10cadbee95b09d3302df5ecb2ad70eb9e396797
SHA512 09874c95501b043b36c9d78c525502be44d73b9de8306267338e61d73e451666141473a5a4a32c211ada79e8ea02b7dbb61ba2a2e1685473e3c52655c92f4876
SSDEEP 384:noiFiZcI63sNn8TUNTUlIm25mge3EKzfMBVgrCioFl/tA67O6R2Feo9rgL/7IzBs:zFQ636wgSpUBVgwFrz7TRoVs
TLSH
T1ECC24C76EC94DAABEDEB8AE5A74A3607EEF04153C68C9AC0D5C85D2C00DB5DD070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7640c9f2-9ad2-41dd-9e39-4b5f683d6318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7640c9f2-9ad2-41dd-9e39-4b5f683d6318.tmp
Size 25KB
SHA256 77fbb56345e26946ab0515aa0b48ca8ef52d1cc414832cbfb333bcda0bb05dfb
MD5 b9f0e58b1635416f35cba0f8270f7639
SHA1 a6728ef70c08aa56e42d1494c133627d6014ccae
SHA512 730d817ecdee008744a9608e44328d3f3d1fab473967e5da6af54796836328011857bc6111e9c581ee2e03c8fc8be82d24ec73a8fabfa6b7d9a7da6b3f39c3e0
SSDEEP 384:nqiFiZcI63sNg8TUNTUlIm25mg5/nKzfMBVgrCioFlSK7O6R2Feo9rgL/7IzBor:hFQ63RwgSsvBVgwFkK7TRoVs
TLSH
T192C25C35EC94DABBEDEB8F9AA74A7A07EEF01163819C89C0D9C85E1D00975DD0707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a72e610-2a9e-42e1-8c55-f4913b240d6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a72e610-2a9e-42e1-8c55-f4913b240d6a.tmp
Size 27KB
SHA256 09891aac2956b6a37e8b45cc12ba08c4454a6c98c3a17744eb5ecb3047f12eb5
MD5 48e9aa2d7c7bea503ceaf31d3e545303
SHA1 9f13abe16cdd3337a4c38bba0dc4b52b18411482
SHA512 5e08bae999a1bef13a9ffc1f735144618f208fe5099536ef625a47188ca93ec5bc55b404ff6f517a2b3e0885603904c42a913662692a42ad2eab29e50507cb05
SSDEEP 384:nriFzQkUSvHK3sNj8TUNTUlI4x5mgbO3KzfMBVgrCioFl/9A6vaTZcSgL/7IzkIF:GFdq3qwgZv/BVgwFbzvaTZctLC
TLSH
T154C25B36E894EEBBEDE78A91A74A3647EEE05253C6CC4AC4D5C85D2C00DB1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

16f7eb89-e1d6-440f-a204-44b7b3bf13a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16f7eb89-e1d6-440f-a204-44b7b3bf13a3.tmp
Size 11KB
SHA256 15d094a55cd0e8f84f3376e436044d62a0190078f71fb3af05909f24b31db79a
MD5 21a2f9bab6fb92b74f8107da9ddbed74
SHA1 182047f2603c13f0d2f66259396ada87403cb40c
SHA512 83dae23d45b9e82e8cd1212a47a3cd6872e86a6dde3bc7da0064ff7402765985ae28832d70692f6a0617bbfd71dd79745c136560e6f8256c3ccb289eecde60d8
SSDEEP 192:sxZ7RTk2/fEsPQZZ4xzodpHdHW6+WNGYbIttbYD2LIg52NJ:sxZ7q2/fEsPOZ469HbGFXYDEkX
TLSH
T1ED42B715AD28A93B9CC7E609FA55BF53E3F9503290D41E44A6FC8A1C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38199158-4e71-4df3-8665-330e28f28927.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38199158-4e71-4df3-8665-330e28f28927.tmp
Size 11KB
SHA256 b7f0cd271f63965db101c9b96d251d48990e6c52116cc3accef4bcd5a844d804
MD5 5fd1c625b79d013a7a052a7cfb771017
SHA1 fad3f68579befba8f1371e1b2c34a7bd2509abd1
SHA512 237bcddf4381ac12862561e93d94a7cff34a148a30d658c1f95588af7872aa4d5642e0046f02f346e5b4bf24c036d45133f659c0d2b2d3cc29f08b4aec7fe454
SSDEEP 192:sxZ7RTk2/fEsUQZZ4xzodpHdHW6+WNGYbIetbYD2LIg52NJ:sxZ7q2/fEsUOZ469HbGFuYDEkX
TLSH
T14842C715AD28A97B9CC7E609FB55BF53E3F96032A0D41E44A6FC8A1C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d09de4a-6aa8-4727-a983-8fe687569caa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d09de4a-6aa8-4727-a983-8fe687569caa.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

defeb5fa-105d-4411-af04-803f60e286b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\defeb5fa-105d-4411-af04-803f60e286b2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1656356e-2516-49df-b0f3-0a924a319954.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1656356e-2516-49df-b0f3-0a924a319954.tmp
Size 1KB
SHA256 40a766787ca8b3cb3e7a966fe56a8ed209ac587751025b80e5484dbffdd4b8d2
MD5 2156fe35f8835701ffde914cedfef649
SHA1 4300357dc83b0b9db96b1ad6a2242ab55effd43e
SHA512 5b968dc8e3ddfd23c60fb06d021ecd9366b846cc6e296d773cb78fcf4e8298f6f005eacf8f7314329dfb4d7cd74ad37513855d5ff51d3af28fa82a1e29acc96d
TLSH
T18731AFF783F4856E8A0196F0AA18AE2FDE2D0515431C7D9A84E4AF27D3F3471D14165B
MD5 SHA1 SHA512 TLSH

Submit Download

3a53b85c-535a-4fa6-a49a-bdd4cd52371e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3a53b85c-535a-4fa6-a49a-bdd4cd52371e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

53bd7e4f-eca2-41c9-9783-5c66e1929aea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\53bd7e4f-eca2-41c9-9783-5c66e1929aea.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 775e1a21fcd16715de24ae5f8c2fa704a4e1bcfa0f95b0b6d83d9e00f45ee0cd
MD5 6ad6fe86f254d8b9aefd12330cd1df0c
SHA1 e6a4c04686433d05c37fcd1340c307e19eb428d7
SHA512 3b9acee53bf92a74df40bb90efe3c9daf9494115b5422df593b6646119607d01fcb3cae25ffadecb1ba35856bf6bae8502b6e67165f39dcdea740f4b49e3c393
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvX0vvA:OtfFvpopPxrB4Rhf0XA
TLSH
T1DAB2251471BA021138FE790881B69B5E064232733259E72B7FBD14A69E6BF085DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a5827aae-61d9-4e85-90c3-d2fe5193696b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5827aae-61d9-4e85-90c3-d2fe5193696b.tmp
Size 414B
SHA256 8d3b782ed96dd1d03b0a5ad74e45d21cd7631a9bcecc0c48048534a045381cd7
MD5 c59dfa45a4a3a51039088dc4f2e1058c
SHA1 69f65738a8a904f48fb13c5e44d6530a3ee5f909
SHA512 bc6a503dddb89c028539675e8a7c94f5a8d34f7dd5a85575d377cc804cc2e09fc10155465521476f83c97f760e7bd7c5e36f10fbd73a9e204ccf00c3787785aa
TLSH
T16DE02BE9C91BBC3F59FC172854D41685EA51134B3A80898B373D910D8FB5A36418686C
MD5 SHA1 SHA512 TLSH

Submit Download

e1eefbab-812b-4b30-93d0-99474220af0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1eefbab-812b-4b30-93d0-99474220af0f.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efebe979-779c-463e-9681-239712380611.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efebe979-779c-463e-9681-239712380611.tmp
Size 11KB
SHA256 e639e6f78075a4077cd927e31ff419e7c3d3c06b54fecb5758e42cf996fd876e
MD5 4ed31def8138165e6431e182dd71ef60
SHA1 841b0a66387ef74f0d7b1d3590477f5fd97b2670
SHA512 56f846e8022b3fc4b8f4f85f0b4132de67a906c14d7bbd959d3520276adcb638e1571bc60f107848b172a8f11bb3a43f98928ab3e5664f5977f346982a79781b
SSDEEP 192:sxZ7RTk2/fEsuQZZ4xzodpHdHW6+WNGYbIttbYD2LIgjNJ:sxZ7q2/fEsuOZ469HbGFXYDEjX
TLSH
T1C742B715AD28A93F9CC7E609FA55BF53E3F95032A0D41E44A6FC8A2C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3595a79-b141-41c4-a4a2-7f543f349322.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3595a79-b141-41c4-a4a2-7f543f349322.tmp
Size 26KB
SHA256 59766adbf0c29ef54cdebb9ad19d415346e36cc6fb3b43a2369603f679a91ba3
MD5 7cc59b44fdff1252acd60efde783170a
SHA1 f529c2436d86a985b75de8f70ba35c360a2ff473
SHA512 88a0bfdb39d454b3ff438a315a5c7901d037e3734d283505107eca09f3aad85481d51e75d4c29028ac6c340c03aa14c63bfb57aa1bf0307f6249ef4f955df55f
SSDEEP 384:n+iFzQkUSvj3sNj8TUNTUlI4x5mgbO3KzfMBVgrCioFl/OA6vaTZcSgL/7IzkIIC:VFdj3qwgZv/BVgwFgzvaTZctLC
TLSH
T1F8C26B36E894EEABEDEB8A91E74A3647EEE04253C6CC4AC4D5C95D2C00DB1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d2bd25cd2203349e71ef92c3e2867c8cbc08c1fbdf009dd2ffa484c4536b13bd
MD5 99f4a08bfd7d6295d10937d6f405f154
SHA1 fcd8bef6dca6e837981200450b8f91e944f6b6d8
SHA512 fa02b1c28eaa30a037057b11111d03d2a3ea84b448e4b3eca06ab4519ea8e5fef4da148c274f9341d5499d3c2d24949c3d2a8ec210a97a09d10cd42a2f417d12
TLSH
T114412A58A6EE1148B3B77F5B9BF668AE487B79772F06D45E10110E4E0623E40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1840-195-0x0000016680000000-0x0000016681000000-memory.dmp

Download