201cd1bf3d32e7f5fd8aa22c6de5370852fe03fb654ee22d345dd82f16a246a0

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 896B
Sample261110-pgtptstsbw
SHA256 201cd1bf3d32e7f5fd8aa22c6de5370852fe03fb654ee22d345dd82f16a246a0
MD5 6bb03ae5bc151ad04e3875dc8992e270
SHA1 6c632430469361e39aa0a0a457c9e30d90a5119b
SHA512 c84ad5d7c53626ed0b618fcffe8c6a71cae735dd822f1b024ffc6fb9353b351b0913e4f17acef1a548d0a359ea7d645b5d4b48c7640feadf90777a8d65589f43
TLSH
T12F11637BF382210B9AC34341786311293B2503410762DF1A398A0ADADBA3F9BE50B9D4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{9A257A2B-0BD2-4080-9F44-D2768FF8EF60}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 5292	1944	msedge.exe	84
PID 1944 wrote to memory of 5728	1944	msedge.exe	85
PID 1944 wrote to memory of 2184	1944	msedge.exe	86
PID 1944 wrote to memory of 2184	1944	msedge.exe	86
PID 1944 wrote to memory of 2184	1944	msedge.exe	86
PID 1944 wrote to memory of 4868	1944	msedge.exe	87
PID 1944 wrote to memory of 4868	1944	msedge.exe	87
PID 1944 wrote to memory of 4440	1944	msedge.exe	88
PID 1944 wrote to memory of 3756	1944	msedge.exe	89
PID 1944 wrote to memory of 4440	1944	msedge.exe	88
PID 1944 wrote to memory of 4440	1944	msedge.exe	88
PID 1944 wrote to memory of 3756	1944	msedge.exe	89
PID 1944 wrote to memory of 3756	1944	msedge.exe	89
PID 1944 wrote to memory of 5084	1944	msedge.exe	98
PID 1944 wrote to memory of 5084	1944	msedge.exe	98
PID 1944 wrote to memory of 5484	1944	msedge.exe	99
PID 1944 wrote to memory of 5484	1944	msedge.exe	99
PID 1944 wrote to memory of 4196	1944	msedge.exe	101
PID 1944 wrote to memory of 4620	1944	msedge.exe	110
PID 1944 wrote to memory of 4972	1944	msedge.exe	111
PID 1944 wrote to memory of 4828	1944	msedge.exe	112
PID 1944 wrote to memory of 5444	1944	msedge.exe	114
PID 1944 wrote to memory of 5444	1944	msedge.exe	114
PID 1944 wrote to memory of 4780	1944	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffa453cc188,0x7ffa453cc194,0x7ffa453cc1a0
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,12728831609856556235,11764918633927795095,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,13524943737494372533,4502821636799533298,262144 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,16760419466691225420,11572407606394039470,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,5569544305547229430,6229985351056242109,2097152 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,753566912507438900,4494216523484795167,2097152 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,4481639207636568653,6885375842588662135,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,9189477137795851566,9393128723144835534,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,15221150229332399959,2379728594874785325,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,15221150229332399959,2379728594874785325,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,18369330427106607844,10937212784647949218,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,2039624752076101259,9837720799649135555,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,1942116978902873209,11568818064914849639,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,17914368224095570167,6248403961488453829,524288 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,12705887079048011705,16902331306689920708,262144 --field-trial-handle=2180,i,8333114626477319993,1306766526681231918,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2762e61f-c48b-4416-8395-4f2f6f64eb2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2762e61f-c48b-4416-8395-4f2f6f64eb2c.tmp
Size 26KB
SHA256 721be1c387ab72862c52c13871f3e9bb6317ee9a198b79874f5f839d7f20b015
MD5 62a9d3e8ff2949ebdee3931e4ba34df9
SHA1 0cf60ffd73a126bbc0e62651c2698d86a7084c9c
SHA512 7ba7023ceacba7d4071bbc59c7f6ef007dc343199b8cc1f1178ef82416aad0490cd7151d239f06438e8683667d3850ccc6697d3b350c45f47e1a3e83ac523d37
SSDEEP 384:npiFzQkUSvR3sNR8TUNTUlI4naKMteUlw2fvBC50mvy1s2uvWiTvaTZcEgL/7Izx:AFdR3kwgPGU3BCm68s2liTvaTZc/L2
TLSH
T1FBC25A32E898ED6BEDE68B95A74A3A43EEE04253C9CC5AD4D9D91D2C00CB1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

819bb540-ae32-4542-87ff-0a34c68db70d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\819bb540-ae32-4542-87ff-0a34c68db70d.tmp
Size 26KB
SHA256 f028405f7fe73da48bfdad5565b63693b1f34ab1d4ad7c130fe478201dba5415
MD5 f6e080e3bdb4a67bb1a9ff9d6bf58935
SHA1 d1b72d6ca8e99c5782636aa4daede4512e178880
SHA512 1253e950db7af423d927b0a5d60ec30a89aa55f7a7de93b8ef7d1567b61f336747fc44250b6935336e5d7ae80e9c70507e48e36ab16fd8c2a8eb7f977d85413b
SSDEEP 384:nHiFzQkUSvZo3sNR8TUNTUlI4naKMteUlw2fvBC50mvy1s2uvLmTvaTZcEgL/7IN:CFd+3kwgPGU3BCm68s2qmTvaTZc/L2
TLSH
T158C25A32E898ED7BEDE78B95A74A3A43EEE04113C9CC5AD4D9D92D2C00CB19D134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

7e719872-df00-4ba5-ac77-a182d6870048.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e719872-df00-4ba5-ac77-a182d6870048.tmp
Size 11KB
SHA256 b4fa511547e9a878a89f01bd9e08d9c1b3376b0c31cbb5510782daf957eaa322
MD5 438c9da803777905f74f953c307e5a39
SHA1 46ef5388f49dd2df8392b5c6cd50cdc4ea0d0b69
SHA512 0abbb93936085fcbc88423752a63a00be860852c82fadbfb9c26dcf13ef2365e972d3e19a190eea11381770297ee6afc0325c47d4d5759970a2d326a030c95fe
SSDEEP 192:sxZZDRGkc/fysEaQZLx8SzodpHHHW6+WNGYoro1SPAIg58KtNJ:sxZZDXc/fys9OipnHbGGSEmKtX
TLSH
T11E42D7156D28BD3B9CC7D219BB56BF53E3F9103290911E48AAFC8A2C15E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12a00d22-33cf-4120-95ce-80ea61f64897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\12a00d22-33cf-4120-95ce-80ea61f64897.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

95c39c60-bed9-40a4-be32-3e131c0bfb4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\95c39c60-bed9-40a4-be32-3e131c0bfb4d.tmp
Size 1KB
SHA256 86aefb0a92961ee2d2a6e85db5bd973484209580b2db6d94075ce74b6ce0ecb2
MD5 be1e192015b52f6447f5c6ade36630bd
SHA1 fb3c071f13fee0e0dcda05eb3f8e9ae1e8bfaa6c
SHA512 984ab8cf9be6b84d8f58b4545c5bbe3df6da0ff4ba1d730f7d5a45074b37fc416e7154e8df65ff05114e29cdcda69ffc91b9a1aa770c69682cc306fb2602ce30
TLSH
T16031ACF787B4856E8A01D6F0AA18AE2FDF2D0514432C7D9AC5E4AF2B83E3471E14165B
MD5 SHA1 SHA512 TLSH

Submit Download

aaf6831d-b213-4027-b5dd-424ec2d59056.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aaf6831d-b213-4027-b5dd-424ec2d59056.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

f2d907c3-3a73-42ba-a4f9-a9a1229586ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2d907c3-3a73-42ba-a4f9-a9a1229586ce.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3343167be84da96c61098a64050fecc0ced449ae8e3c2656545df63fe146ffec
MD5 b0aedc82e5dfbad16861030dd5979dc4
SHA1 683dcec74558b71a239b0148ac7c892936a6a8f5
SHA512 56c3a951c201504e6efbe309c0bce82fcfc7ef8bb11f90728abc7095a566f2a47e30859ae69c752ea74b881588c12ad3b0189d515a740454cbe8f418a8425aaf
SSDEEP 192:sxZZDRGkc/fyswaQZLx8SzodpHHHW6+WNGYoro1SPAIgjtNJ:sxZZDXc/fyspOipnHbGGSEjtX
TLSH
T1A542D7156D28B93B9CC7D219FB56BF53E3F9503290911E48AAFC8A2C15E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e7f2bd6cb699834ea248cb57c0109d445bf5f6aff0bc96fccfadf5bb5b399c86
MD5 2b4c8441ad7df05b6779ee3da36f7e21
SHA1 909199e6643389b1df001a9d7c657063fb65ea2b
SHA512 40c07c9db1128964a5a7149bdbc03882d7dbd24f9a6ccf94804d6c11a1a9d09d044355576d01b651e7aad3daa2db9c4528453f5dee1134e1c3df8608118bce27
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgB:ST/2dXOJhJlpfnpp3tNXVrN3WRFm
TLSH
T139B2211571BB421039FE391891B6972E064231B33119EA6B7FBD04B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a75f032c-e815-4983-b924-bd8915bf6655.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a75f032c-e815-4983-b924-bd8915bf6655.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0bce463-1676-4e38-9204-647d73552dd0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0bce463-1676-4e38-9204-647d73552dd0.tmp
Size 414B
SHA256 831e0fb9661cea7f622b2a4afa9648f273eea31b79dc4864d659f922fc72f979
MD5 8c79a821fb8f8190233807860474d459
SHA1 7cb8ecfd71ad24f4bfb018b4f3099dc308fb82ce
SHA512 601bbeedd4fb4ce7694e937ceb05fda4dcb5d203395b560d9bb768f3db581dba1755c3aae0a048bc3b316a2b0417cc7d4e960437fba0ff92403b8d58381759b7
TLSH
T1C6E02BAAC811FC3B08FE0B7C54985746E71023672A409C4B3B3D910CCFB4637528686C
MD5 SHA1 SHA512 TLSH

Submit Download

ca55664c-6c22-4af9-b874-aa3724263d70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ca55664c-6c22-4af9-b874-aa3724263d70.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e3484193-fb8b-475f-bb02-2ec2863542cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3484193-fb8b-475f-bb02-2ec2863542cd.tmp
Size 11KB
SHA256 313bece317909a6a3159c545c5b8592589469e8509fbc6e20fdbb249f424c6a0
MD5 9129e27159c47cda0cea39e55400ffaf
SHA1 e520455676182bee0621586951052b1c969ecd1b
SHA512 6781f9695d9f457cd3bf5733c009850f87421a83362fe89157ffe8c0bd9851507a0e45053b8b48de1bc5b4a882d5416bd1fd3a0d6e9eb8a117f25984e660f019
SSDEEP 192:sxZZDRGkc/fys9QZLx8SzodpHHHW6+WNGYobo1SPAIg58KtNJ:sxZZDXc/fys9OipnHbGWSEmKtX
TLSH
T16542D7156E28BD3B9CC7D219BB5ABF53E3F9103290911E48AAFC9A1C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be9b8c39-6120-4539-ac2b-350114b6fca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\be9b8c39-6120-4539-ac2b-350114b6fca6.tmp
Size 26KB
SHA256 863bc7ec2f4b29398bfb5395ffdc2052da50ea125c1a9c9243d35cb56411c576
MD5 4ac268ea33a17270a4ec3ececf553a7d
SHA1 dce1ba6334919ec177aedc0d7a415fa92fd1f0a7
SHA512 032d978bb58933eaef0e2c6ed6ffba7d91071f36476eedfab32d491b2c43594151493cbbd140c192382affe5eb022536472e5e5da00fec9b3a027f6f73e3ef74
SSDEEP 384:nQiFiZcI63sNt8TUNTUlIm2aKMA1Gw2fvBC50mvy1s2uvaiTsa+VYBRgL/7IzWo4:rFQ630wgcaKBCm68s2PiThgHP
TLSH
T158C22972EC98D9ABECE68BD5AB4A3A03EEF44153C5CC9AD4D9D82D1D009759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f001b2d5-bfab-40b3-a03f-be4be5cf0ec0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f001b2d5-bfab-40b3-a03f-be4be5cf0ec0.tmp
Size 25KB
SHA256 8b15ac348d32b3e58d4decfe586665f8cb58fa7c5f28839928b1e2da57a360f1
MD5 6e02b6b8d9c7de89ae63a42b28573c9b
SHA1 ef130b62f3e0812e1d79afb844ace936b0dd48b9
SHA512 915237b980de4b9bb146959df26d089d1c2891ffe0588763719ef5c50de59dd4182dc5e6216880d8bbb90b8f374a69531c5f914964cd3cd3bced90cefd0235f6
SSDEEP 384:nQiFiZcI63sNr8TUNTUlIm2aKMiP4w2fvBC50mvy1sqFDsa+VYBRgL/7IzWo4:rFQ63ywgcUQBCm68sqFDhgHP
TLSH
T1D8B23A32EC98D9BBECEA8FD6AB4A7A03EEF4016385CC56C4D9D85D1C108759D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2051a03-e08a-4b88-a7b6-288e02e754bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2051a03-e08a-4b88-a7b6-288e02e754bc.tmp
Size 26KB
SHA256 502a52902734ee12f5d37bd4a98032cd2205fa8c8a3ce1dc7f93fd55d1bca0e0
MD5 b3a9e0b84a6044e385243db5f0dd6909
SHA1 d641c2f30b5578576ca449be6390da16fb58f292
SHA512 7bb5584b8c603a799940eb34d48f3a2a17c55af4c308e6a99912a5d516626ab05f4103a143ac0fe089884cd4991e4da791c81bb61b95cd89dae760abc95d9ad5
SSDEEP 384:nPiFzQkUSvR3sNR8TUNTUlI4naKMfeUlw2fvBC50mvy1s2uvWiTvaTZcEgL/7Izx:aFdR3kwgPsU3BCm68s2liTvaTZc/L2
TLSH
T186C25A32E898ED6BEDE78B95A74A3A43EEE04253C9CC5AD4D9D91D2C00CB1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f82724f797620db1129bb810e2d1420a0a48dc225427c62c056684b41ba78fea
MD5 9698dc421bbb91826dda05d9146d677e
SHA1 e5c9977993e44f1a5cfcbab16cf2c9932b7654cb
SHA512 5e14d190b4ed851e232d63a43466c3e6840a076c19addbaeb259405544f63dd49b2f5ddc646f679e6d8d0c4f5c374e5bdb503214d0d38578a2600ab1ebf46fe7
TLSH
T18B412C5CA6E91148B3B76F5A9BF6986D487BBC372E06D15D10110E4F0667B40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download