4880b13a6777a397b1453e35f78323dc19a05d2407caa13a5c0c48a5fddb62d8

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 106KB
Sample261110-pgtptstsbt
SHA256 4880b13a6777a397b1453e35f78323dc19a05d2407caa13a5c0c48a5fddb62d8
MD5 c0f2797151d878943af2bcad06ee5b36
SHA1 fc31345f783b4b95b43a3ca67fa7fdff0194398f
SHA512 63b92c9513c5b902d9a866a7c9c0efffa633fc7e7055171fea6d00026bb4326cce021ba3f21cfbd188b6651ecba741e1521a07a0eab08791c3a21a424cebaea2
SSDEEP 1536:hAqued3YiGgbEH2h32xbZdLXLckWxWLWAIcR19WkWnWY15IcR19WkWnWYOay68x:h1u8J2FTAkWxWLWC9WkWnW69WkWnWJnx
TLSH
T10AB30936D106E8A9E816EFE9A5356D36354FE02B9F83C360D2D8CB355642CBCC991DC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{8666348D-BC28-4982-9607-8373FFB927B5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3876 wrote to memory of 1236	3876	msedge.exe	83
PID 3876 wrote to memory of 4652	3876	msedge.exe	84
PID 3876 wrote to memory of 4992	3876	msedge.exe	85
PID 3876 wrote to memory of 4992	3876	msedge.exe	85
PID 3876 wrote to memory of 4992	3876	msedge.exe	85
PID 3876 wrote to memory of 1116	3876	msedge.exe	86
PID 3876 wrote to memory of 1116	3876	msedge.exe	86
PID 3876 wrote to memory of 4316	3876	msedge.exe	87
PID 3876 wrote to memory of 980	3876	msedge.exe	88
PID 3876 wrote to memory of 4316	3876	msedge.exe	87
PID 3876 wrote to memory of 4316	3876	msedge.exe	87
PID 3876 wrote to memory of 980	3876	msedge.exe	88
PID 3876 wrote to memory of 980	3876	msedge.exe	88
PID 3876 wrote to memory of 768	3876	msedge.exe	89
PID 3876 wrote to memory of 4080	3876	msedge.exe	90
PID 3876 wrote to memory of 768	3876	msedge.exe	89
PID 3876 wrote to memory of 768	3876	msedge.exe	89
PID 3876 wrote to memory of 4080	3876	msedge.exe	90
PID 3876 wrote to memory of 4080	3876	msedge.exe	90
PID 3876 wrote to memory of 2504	3876	msedge.exe	97
PID 3876 wrote to memory of 2332	3876	msedge.exe	98
PID 3876 wrote to memory of 2504	3876	msedge.exe	97
PID 3876 wrote to memory of 2332	3876	msedge.exe	98
PID 3876 wrote to memory of 3536	3876	msedge.exe	101
PID 3876 wrote to memory of 3420	3876	msedge.exe	110
PID 3876 wrote to memory of 4280	3876	msedge.exe	111
PID 3876 wrote to memory of 1428	3876	msedge.exe	112
PID 3876 wrote to memory of 4708	3876	msedge.exe	114
PID 3876 wrote to memory of 4708	3876	msedge.exe	114
PID 3876 wrote to memory of 2208	3876	msedge.exe	115
PID 3876 wrote to memory of 2208	3876	msedge.exe	115
PID 3876 wrote to memory of 3948	3876	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x260,0x7fff5d40c188,0x7fff5d40c194,0x7fff5d40c1a0
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,11346803302127589070,10763457414132124557,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,1428601612978832248,12484535250238580230,262144 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,17924232774254314871,12623394480790740594,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,1047032168425135854,2278205918421311224,2097152 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,13245625656070802507,15918913640143266172,2097152 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,11253659101033122965,7817012914720458993,2097152 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,11217248480003166737,12197360376048639605,2097152 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4669050313950323725,5074072953175304818,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,10053304035809892385,13431648629408635164,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,17112486533188851457,3013449047941123711,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,17112486533188851457,3013449047941123711,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,10757974280017013642,17875121328185500054,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,16003299170179636886,8920582431039647395,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,7131195970467585646,14701106518606302305,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3064,i,15757299883478613905,9507117091638988538,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,12551936311415851817,5505411800073490779,524288 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5188,i,5214710269989972889,145562887320427820,262144 --field-trial-handle=2296,i,168188010201015978,964089806320671270,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2e8b73a0-6514-491b-9f2b-059965893778.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e8b73a0-6514-491b-9f2b-059965893778.tmp
Size 18KB
SHA256 5c5427f4f6c82229075e349f113fd0c1772de092d12eb5afd2c790bd5cefb05a
MD5 e4b44d93a225407b55cbaf5d47a65b87
SHA1 c00a61f8ac047a3b2499ce3635b734e1af11ac5b
SHA512 3524bf02a72a08dd189bc03a60bac774fef38342323898b338450a681aca59dcfc0b12e010e4009ae387b014ea6fbcee4cc565c107c998602394f0817c8b744a
SSDEEP 384:uQkUSv0sNi2K2NbqWGh//RjRyTvaTZcSIIl/:e0UW/7yTvaTZcSLN
TLSH
T14E826D31A8797C3B5EB3E590B04B3A03DFB09157D6C92F54D6DEAB2C01DB198231B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2fb26c22-59fb-4a05-86bd-f1d7ff0d22f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2fb26c22-59fb-4a05-86bd-f1d7ff0d22f8.tmp
Size 8KB
SHA256 208915fe222589e826a31276799909db86187156e4c8a1d9de34933324fb4a38
MD5 c39c3c06be7907aa1dd6e30f5f2ab36a
SHA1 5231e2d93742f16558f3192d5f2c7d6781435765
SHA512 774433a46f8c171a2d93631daae15894c006602b419721e2655cbe2e6d73406c8aa203b2861ed3073e4239d774eb2a8918dafda6b9c186d9c8add1baedef21e9
SSDEEP 192:UONj6JUtQmiUyMNQ5o//F7jfez+NxySqjU6:UONj6+rhSo//RjpyTU6
TLSH
T106120935B878BC7B5EA39994B48336139E644267DBC96F90DADD2A2C01DB19C130B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

089fe921-0411-4b5f-92b3-29837c807d80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\089fe921-0411-4b5f-92b3-29837c807d80.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f54c356-12da-4fc8-9f6c-9742cfb987b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2f54c356-12da-4fc8-9f6c-9742cfb987b8.tmp
Size 10KB
SHA256 fb4d4e77eeddabb9333623087b23d493e4388db3bd4b667ba2d0a23530bb8c1c
MD5 47db673a951b8ecb07ac05ea91029c3d
SHA1 e446cdf885978863759153bfcb0c2674e0f63993
SHA512 610ad25cd91ed8ad7c040f56f6c4c6094bf3fd43b98ea8cf187a28198fe0c3c6180034602572809b80ea711e805fa74e59b6a90552b0fea58ccde058214eafca
SSDEEP 192:sxZxR2W2/fbsxjIdpd0HW6+WNGY36JmrmIg5qJ:sxZxj2/fbsx8qHbGXbg
TLSH
T14922C8517E28797B8CCBE209BA25BF53E6F9503291D11E48A6FCDA1C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50b1935d-f831-46bc-81e5-246b78618b58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50b1935d-f831-46bc-81e5-246b78618b58.tmp
Size 10KB
SHA256 3c728628dff7cf88227fe2c599cf1a1e89c6b45d6e25b022abd9325488ce0f97
MD5 9f7d91bf2c0d097c736b7b7eaf09b2c8
SHA1 afc1eb7cd8f5323438611308f027d268d029a7a1
SHA512 10877b03e031b2dea813aaea3f9d72c61edda27542db7a01260ad01b161ba806147898d33dead05acc9b3c15302d5adceb3430efbaee87d42e1cf9170e33ddd7
SSDEEP 192:sxZxR2W2/fbsxrIdpd0HW6+WNGY36JmrmIg5qJ:sxZxj2/fbsx0qHbGXbg
TLSH
T15122C8517E28797B9CC7D209BE25BF53E6F9503291911E48AAFC9A1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59d5d27b-c36e-44e9-85a5-1f0f8106f378.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\59d5d27b-c36e-44e9-85a5-1f0f8106f378.tmp
Size 27KB
SHA256 dc1c383a35577e6cc67620e43d772fec1e9b5606408b625ad94da5b0b784bb1a
MD5 bc3400b08d261b0970e4224677d96399
SHA1 ae51d42da3b872639a7b5f53d2bbc85a9f826278
SHA512 e6518c015dd6497cc4ae7050ade0495d62c9cafbdd582f91277bafba46e807f3cb2a8c46f3443d15ba8e1d91aa5a247c832080137971095de08a10c2b8b1ea81
SSDEEP 768:1VKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/CroGl:1VKlm7QWvUYe0u1ja8/L/E/ZGl
TLSH
T1C1C2FA3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9406596a-30f2-4f2a-8b7f-f9e67d099ce4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9406596a-30f2-4f2a-8b7f-f9e67d099ce4.tmp
Size 9KB
SHA256 4f1b4ab04dc8f45e38ed52067c3291b4e5b91c1286e438b5cdebaee54045109a
MD5 ac7bf6607e19819778c5604fd3574a82
SHA1 868bf517b32574fdb69d02b35ddae86901657f39
SHA512 d5424f479a03096d8add4b595f5673f3a8404b2e6a2e22cf8f89db3915a67019226c71dde87f9be2601683647f789f3564dc4df4f72b36dcf066d419ef884844
SSDEEP 192:sxZxR2W2/fbs4jIdpd0HW6+WNGY36W0rmIg5IJ:sxZxj2/fbs48qHbGXCi
TLSH
T1E022C8517E28793B8CC7D209BE25BF53D6F9103291D01E48A6FC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 291B
SHA256 32a7de066a58efc7ede7e0944c14d6ab2a46bebe1b7bbc584a20a07665de3c34
MD5 4328fd8b8632db44cc98fe0a05937394
SHA1 36b7965b54dde567f737a8d7263bbdb9e4d183c6
SHA512 370345af57cc2fe9330ce485afb2397664314777c8def882a8db64a1be4c6776bbbd45f12e3e04e576a365967b0eef5bde2e1abf5b9eb18d06e48dcd4bf69f06
TLSH
T149D0C29599D4C73A9314E5CB06A4970C8A98621AD7C0AA9E2B40C88831869C8E6E6A95
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f6f681957972e67b4a0e1d877e297ea112f17f0617b4f383b43e3d505ae58067
MD5 dcd5c94bc62f41bc704148cd5b4a1fa9
SHA1 7360d1b77157c27dc65424f0e6377a31990d9f70
SHA512 405343da19ef88e45635c9bb724e0872a1fcf7d79f73a9e922ab9761d6509d4fcb812746da1136d342c2c98e8d75d51176f7d971305fede81df26b3d22c4724a
TLSH
T1955154CF87D14450F75A7AB482DD7E8732B759C34A8BBFC12494C9B71807F148826C98
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4c734b28249bd48b13b9b04c1d60e23eadd7a1a2ec2b7bd6f96e2633cbdf29b9
MD5 f0070988b1cc691ebcda8e647aa1f488
SHA1 3ec39ade0a231a84343e765d63de65305e713579
SHA512 0df0d245d5def4424433eb64010a1faf364662e75c005040fd3d5fe4264aa3897d09ded9845c9076d5bdec6add7315c2ebbcd43cb4bff69bcb105905080304ae
TLSH
T1CC5174CF87D24450F75A7A7482EC7E8B31B759C24A8BBFC22484C9F71807F048821C98
MD5 SHA1 SHA512 TLSH

Submit Download

9941c824-4c44-4dae-8c5a-66c9ede5c374.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9941c824-4c44-4dae-8c5a-66c9ede5c374.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

7afdb48a-889f-462a-a0c8-02075964a45c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7afdb48a-889f-462a-a0c8-02075964a45c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

8c7a5af6-82c7-4b9e-89c0-580512cb1bb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8c7a5af6-82c7-4b9e-89c0-580512cb1bb6.tmp
Size 2KB
SHA256 99474ca218e712acb599f2bfb4f70b6952c15483ec26dcf8fc2e6ffb6c45b1e9
MD5 dc8c70992771251667f45d3197986ee8
SHA1 b52491485334074a2076cdf22cea23a50ebfdc25
SHA512 a621c028db54e64c793073ac3866bb67f624ef2e56b5869fc90924f4c8ade2cba928efc906f3bd3595a716d3dffe01fdfb0c71848e1cc14d86d824ab72c31ad1
TLSH
T1EE516BBBC2D4476E981296F05B24BA2ACE1D155B42283C5689F4AF1BA3F24B1E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

f9b9b8dd-4589-48bf-bd13-b5b1220b198d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f9b9b8dd-4589-48bf-bd13-b5b1220b198d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 68362b6adb06361af0a6d3902a05bc3f1b5d7566a19e494e1a248169ff78bd80
MD5 e1a1a0dc9df8ae20d062a76ef78cd24f
SHA1 301ffe071615b9d5600db03062b6c3955a23a6a6
SHA512 0e9077e5e854e063e3a4101568c7c86da61e012dde36dba861f4bbe76dbe9903c4039518933880c29c5628755b857b65bbc8e29722ae0cc42cc43c0b47a69b1e
TLSH
T182216E92B13E86402AFEA50A4B78D4168B497073301CE5EE776CD0F90926F145EFC8C9
MD5 SHA1 SHA512 TLSH

Submit Download

a63fc3e3-9106-49aa-9cd3-386265e0481e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a63fc3e3-9106-49aa-9cd3-386265e0481e.tmp
Size 9KB
SHA256 d718ece8b7b72bf59b76b5805372efa5319a5ae3666eca2583811cc3765490c9
MD5 5f197700c0c4549f8bce6f0031d3143e
SHA1 870d12b11d3d3fb5f7893dee4f52a06ecaf708af
SHA512 ce0bcb0b092f53d10559c0b5d5672204a80890b65728e17ce7852f9265ef2fd9856d5c197152fdd2301dd42ec576ef96d3882cd92373831b21b92c647489bab3
SSDEEP 192:sxZxR2W2/fbsEjIdpd0HW6+WNGY36W0rmIgrJ:sxZxj2/fbsE8qHbGXC9
TLSH
T19622B6527E28B93B8CC7D209BA25BF53D6F9503291D51E58EAFC961C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc8ba41f-a711-487a-a037-308f7f2df7d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc8ba41f-a711-487a-a037-308f7f2df7d2.tmp
Size 10KB
SHA256 2573ead21b06ad3344f6589fa3995077fdb2371e04ee978cee0888a2a84078f7
MD5 762cf32d309e882fa4837f271b0938c3
SHA1 909b3746bdfe267a2250bd698c0ffa13724f716f
SHA512 3f6d6ff14a85d5707fbf4651ee9b6df6a5604ee4baa0da26828ca07e6470a44412c7c174dc13de404502862ec84b1ad53be766d457858f2ba9638f71ae9599e1
SSDEEP 192:sxZxR2W2/fbsxrIdpH0HW6+WNGY36RZrmIg5qJ:sxZxj2/fbsx0UHbGX6g
TLSH
T11A22C8527E28797B9CC7D20DBE25BF53E6F9503291911E48AAFC9A1C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9233fb40-73bd-47b4-9209-b9f68da51619.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9233fb40-73bd-47b4-9209-b9f68da51619.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9b7df2f-fa84-47be-8d38-a2781464787b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a9b7df2f-fa84-47be-8d38-a2781464787b.tmp
Size 21KB
SHA256 257dccf83abdf5e864502f501ff92cd4cdf783fd0785444e7169a31a1a5e0159
MD5 03e9f14d944d28ae26efd5f0c64f2e44
SHA1 bcea65523920f61538db9ffa865e729a12df05df
SHA512 08e48334f798d55f28776220ed0e2e6d57e8ea49629c3a115d8407c676b860a5105713ec397f8365ef2ff821e02fe44162126c13fb47449b2915864942083f4d
SSDEEP 384:0iFzQkUSv3zsN68TUNTUlIl2K2NbqWGh//RjryTvaTZcSIIl/:PFdjXwgcW/RyTvaTZcSLN
TLSH
T116A25D329894AC3FAEB79A90F54B3603DEB041A7C9C56E54E7DDAA2C00DB1DC134BD11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bae2b05a-1ca6-4ff9-b876-4ee6a37bb3fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bae2b05a-1ca6-4ff9-b876-4ee6a37bb3fc.tmp
Size 18KB
SHA256 964d20cabcfa39acca9578fd1a043250d1ef403927064ed6a8b32c11712011dd
MD5 075d6ade0c39dd60b024ccee6ef10e56
SHA1 bb277f00b44099896df96ad1b44cab30dcb5340c
SHA512 d23879f5e628b92d388c348397d2a447fad00a9608430b04fce02d0faf1e0f63e95c7cd9e1f83b7085a320e03232519433f9f62311d31473cec83c28aaa4b8af
SSDEEP 384:3QkUSv0sNizK2NbqWGh//RjRyTvaTZcSIIl/:J07W/7yTvaTZcSLN
TLSH
T1EB826D31A8797C3B5EA3D590B04B3A03DFB09157D6C52F54D6DEAB2C01DB198231BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efe0c285-6781-478e-9f81-b842c972cd5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\efe0c285-6781-478e-9f81-b842c972cd5a.tmp
Size 8KB
SHA256 d112b7ca9c614bc29df4aef3af0ca45f3f54e1eef7a433f9617c3393d6000c69
MD5 788f872097c69ce7328cf9e1f3dfc616
SHA1 ec86262e4e4640cd9fbbf24efec1e65c1ed8cf6d
SHA512 0543c8c40da200f293274d42cf5b00d7ae4c32c78ebdd9bdc7965eaf6cb3abee43a02ab9f649828c21d53dcf3763e04f79180500ee6a9ac4d45106c0b2d68c7b
SSDEEP 96:KqONkWQsjpfbUmjH5ih/cIPURHl8h4otop5raDTBKP4v+Y1xf//ojduxfP7wFBCI:BONu6JUm0QmiUyYNso//F7+BCF4U6
TLSH
T1AC02E939BC787C7B9EF3AE45B4877B239FA4116BA6912F40DAD92E2D01D715C1307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d10cbf9-b36a-41dd-995e-6ff1903878ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2d10cbf9-b36a-41dd-995e-6ff1903878ae.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 180112cd02a4cb0aff9884f276acd15bbd3518e150d808e96833e99770d2abf5
MD5 2b135b143f46c94180899a54f9ee2110
SHA1 319fd14268caf95b3add630d5feeb7b75ed0eb26
SHA512 b40893d0b3f52aa567f79242982273be5896a6bb8ebaaf87e497610aca080c90514997ba57eb944c2aba7a9affe10311cdc3cbe446bab172b4725f5106035fcb
TLSH
T12741095CAAE91108B3B7AF1A6BF6A86D847BBD772E0A955E00110E4F0962B40C971737
MD5 SHA1 SHA512 TLSH

Submit Download