2eee12ebf2b77c0de3dce6b0271a831e4c42f8851662515292b62118b28361e9

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 908B
Sample261110-ph79lsfc64
SHA256 2eee12ebf2b77c0de3dce6b0271a831e4c42f8851662515292b62118b28361e9
MD5 d3ff7bc280185b7e57d791c543f92c7e
SHA1 86fbd5fc2501b4293b0214280598a22fc0b839f8
SHA512 4a5486baa0a77d1b856dea40912faa0fb991563931e918aeaea8db63ff4af308c6870da589b3d73cb69d84c14fabc87ea2baab4aab76430524c4231597d72d9d
TLSH
T13E111E4758F0C41922F045E22CE1BA1C4EC5AD57A369DC8832EC446A4FE0F8CDEC7AE8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3340	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{C58ED7C8-0698-45A7-9319-9378BEA502F8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe
1060	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1060 wrote to memory of 4152	1060	msedge.exe	86
PID 1060 wrote to memory of 3340	1060	msedge.exe	88
PID 1060 wrote to memory of 3948	1060	msedge.exe	89
PID 1060 wrote to memory of 3948	1060	msedge.exe	89
PID 1060 wrote to memory of 1980	1060	msedge.exe	90
PID 1060 wrote to memory of 3948	1060	msedge.exe	89
PID 1060 wrote to memory of 1980	1060	msedge.exe	90
PID 1060 wrote to memory of 1716	1060	msedge.exe	91
PID 1060 wrote to memory of 1716	1060	msedge.exe	91
PID 1060 wrote to memory of 1716	1060	msedge.exe	91
PID 1060 wrote to memory of 4156	1060	msedge.exe	92
PID 1060 wrote to memory of 4156	1060	msedge.exe	92
PID 1060 wrote to memory of 4156	1060	msedge.exe	92
PID 1060 wrote to memory of 5004	1060	msedge.exe	93
PID 1060 wrote to memory of 5004	1060	msedge.exe	93
PID 1060 wrote to memory of 5004	1060	msedge.exe	93
PID 1060 wrote to memory of 2616	1060	msedge.exe	94
PID 1060 wrote to memory of 2616	1060	msedge.exe	94
PID 1060 wrote to memory of 2616	1060	msedge.exe	94
PID 1060 wrote to memory of 3408	1060	msedge.exe	98
PID 1060 wrote to memory of 4404	1060	msedge.exe	99
PID 1060 wrote to memory of 3408	1060	msedge.exe	98
PID 1060 wrote to memory of 4404	1060	msedge.exe	99
PID 1060 wrote to memory of 4648	1060	msedge.exe	103
PID 1060 wrote to memory of 4772	1060	msedge.exe	110
PID 1060 wrote to memory of 3164	1060	msedge.exe	111
PID 1060 wrote to memory of 2144	1060	msedge.exe	112
PID 1060 wrote to memory of 3896	1060	msedge.exe	114
PID 1060 wrote to memory of 3896	1060	msedge.exe	114
PID 1060 wrote to memory of 1848	1060	msedge.exe	115
PID 1060 wrote to memory of 1848	1060	msedge.exe	115
PID 1060 wrote to memory of 4972	1060	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff91224c188,0x7ff91224c194,0x7ff91224c1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,2883598517300641412,13654657818167492763,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,14530984742977697746,13851781028257176312,262144 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,5423736790168873950,15822089721859833715,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,12428889435572057249,5336078127612250961,2097152 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1351652120686962727,14805966633640571307,2097152 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,11377472981481430486,1879572380458005828,2097152 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,6355941386460225897,3488806084414925979,2097152 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,9520973050452677774,2419363692089894742,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,17879145932889251361,11518873348006700274,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,15779400325846284029,14869123458621644707,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,15779400325846284029,14869123458621644707,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,16009698021521970467,12258863586540058452,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2735659223424868680,4735085835024153872,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,10562858658547928143,7334689801587849629,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1044,i,5523591642789241021,18207823231764595447,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,13302194229190854502,14968508815292119856,524288 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=784,i,16089044662414968812,6256916691197397719,262144 --field-trial-handle=2364,i,11173982508644685564,17377077262806097306,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6f3b33d2-eb33-41e7-9d48-7517d1db9bcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f3b33d2-eb33-41e7-9d48-7517d1db9bcf.tmp
Size 18KB
SHA256 e6490c6a348b67ec8acb964172ac92e1f17e988a4b6ab296fc6659ec7c5c630b
MD5 3c498fc236d078d324f40723ed0125be
SHA1 fc876bec8393e81098a26d6174f6b66587b155cc
SHA512 a61118e9e7ea5d6d4b2115a3105d4326e6bf147071b82a0ab5c4315fd49b729ee639642743723de3ec715d3efe44d2d914bb59fdf02048c3868b1a6abc52a4a5
SSDEEP 384:kQkUSv0sNUEK315fZzIGmDP8ouXoiYHvaTZcFHnIIl6:U0l3/lsh+oiYHvaTZcFHnLg
TLSH
T138826D32A87DBC275EA3A540F54B3A13DEB48137D6C81F90D5DDAF1C01DE258234B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

68923e0e-91a1-4a14-976c-f16fbdb10867.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68923e0e-91a1-4a14-976c-f16fbdb10867.tmp
Size 10KB
SHA256 265619bc8bc005a002241c924c1d22294932d83ff7a78b590131c7a1f42ae843
MD5 5005a412c2a0d4bfbf8db702d627bf77
SHA1 a55518e527a2e255b3e4156886a8b56ab87c81cb
SHA512 21bfc5a10b42faaee753e4e7e0234f793a6274d2bd391ae57a19d454066176f429a8628b66d2d3ea92aebbe2c7fc0cb6d4e9fdcfec0daa610e23e3b99784cbd2
SSDEEP 192:sxZSRXWa/fYsxHKIdpdsHW6+WNGYap5PhDIg5UJ:sxZSoa/fYsxjaHbG1m
TLSH
T13C22C6126E28797B8CC7E20DBB55BF13E6F9503290941E48E6FCDA1C05E76CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 3644ab3902eff01ecea9fa7f531951cff843373b73faf341d807bb3502fdf19c
MD5 399835e069a018c5702e3d921bc546dc
SHA1 769d7120541de8d5acc1f100dd2a08d7c66c4370
SHA512 2659f42af622cf3ba28315e9715bc1f4db61bf14ab9c68692254cd69a687deb17d274940397e32c02b0f39435b335c8dcdc70d1a7f205af986ca3862aa28df07
TLSH
T135E026CC5AC8C27FE32A77C741FC530ECA913A1B93C8A90E5B44C9C47001250A3A2A90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 8f29485c962ee8f4ab194d7928d14329032545ab2ab32566d3f89edd0e8bcfc9
MD5 36a476da1154f3ad91767f0a91654396
SHA1 ceabbea8b67e6a862dd71279ebc1201fe2062231
SHA512 de452483f8e4ea448ec63ca3835d51a5b3a9e34b37c7637673e854e2b40838b4cdac10ceb3b7cffeec12a3308e5bd6b33e7dd557f9d1a7fff57cd87d65624963
TLSH
T1F9513CA13592C0D7F7F8417082DD218B3FF8D5A1458FCEE32FA4C8BA9846771C194258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2e041331026780f5e75e5d5ebad71188a6dbe46c3e90a3cf4b175952242ca27e
MD5 ac47717b108bd5be6dea0251ac113e4b
SHA1 aa41daceece04be5f881b345b8c58b98e0a9e5b8
SHA512 d10e8f1ac70fa6ff912ee8b11d1e709d66e079bba19c46fd25e8bf9ebffb9faa90c26673a5d75180fea6ad56a8c32bc659c8dac7f55d4d878c6d940b4f746020
TLSH
T1CB512CA136A2D0D7F7F8417086DD614B3FF8D5A1458BCEE32FA8C8BA9846771C194258
MD5 SHA1 SHA512 TLSH

Submit Download

1f8742ab-5ed1-47aa-af76-a7e8554315c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1f8742ab-5ed1-47aa-af76-a7e8554315c0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

010b2275-9e58-4c38-b8ef-ed0da7c94672.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\010b2275-9e58-4c38-b8ef-ed0da7c94672.tmp
Size 949B
SHA256 6a2c026590c292b25b59755da34d31ab4167b5f30771b8ef61a29c9392844992
MD5 ce47985da74fb05fd097563dbc33dd59
SHA1 4a4e36bc67f36fdde1bfd7cea4e230a8a26aed03
SHA512 7a1027a4ffe98cd2fdebdba778f5eb03254f426b1304da6aeb61866dda5024bce4c4a9dd189c0e03f9e3cbf1bb0f35053295c04ca03ba440df04f5ea00e1b981
TLSH
T17A11BDF3C3D5856E890156F05A24AE2BCE2D0606422C7D2589D4EF2783E3079E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

3c125fe9-a390-4bbc-a256-93b570109e75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3c125fe9-a390-4bbc-a256-93b570109e75.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

85d9d8a8-329a-4d3d-bd6d-802a8855138c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85d9d8a8-329a-4d3d-bd6d-802a8855138c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b521cf85-15a3-4ebe-81fe-8c7e109bb56d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b521cf85-15a3-4ebe-81fe-8c7e109bb56d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca06714a-7aff-4cde-b9d0-95cf2826cf5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ca06714a-7aff-4cde-b9d0-95cf2826cf5a.tmp
Size 10KB
SHA256 11ddc8de7d0189e2ab09a570527f53f96d09b1b630f53482350b495eb3bdf8e7
MD5 7849c9f077ce43122d52ed6a70637440
SHA1 b46f0b009d255470264133fc9cdd531a42761151
SHA512 d3d50562129a16a3eaa23d58daf7c39aa6de40cc4a7ab9f443f6cb0fc9eed388991c66ac2185bd678252b0172f09a6820f40e76789297a6cb20f0c8d046bb1a8
SSDEEP 192:sxZSRXWa/fYsxHKIdpHsHW6+WNGYaphwhDIg5UJ:sxZSoa/fYsxjMHbGom
TLSH
T1E822B7526E28797B8CC7E20DBB55BF13E6F9503291941E48E6FCDA1C05E76CD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb668e49-9ae7-4c33-9c87-c1256b445111.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb668e49-9ae7-4c33-9c87-c1256b445111.tmp
Size 9KB
SHA256 2519bb7bb6136f88638337df16e76c7e0aa6572f74805b38f0b4470e8bb581c9
MD5 0d9f5df0b769e1dbe8bcda2a54983c1d
SHA1 a51a32bb6adb38a8a1d9deb0084ef6a344c6820f
SHA512 d6657ac70bfd2043e98840fac0d4df76336dd7e0b987ada61fcc4ebb4fe598f69a5fe9da5001760ce271094ce9785cab7b1cfebebc013d5e68c5cc46846c3771
SSDEEP 192:sxZSRXWa/fYspHKIdpdsHW6+WNGYaplZhDIgrJ:sxZSoa/fYspjaHbGz9
TLSH
T10422A6126E28B97B8CC7D20DBA65BF13D6F9503291941E48EAFCDA1C05E76DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd07c308-f9b6-458f-8e09-76100487bc27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd07c308-f9b6-458f-8e09-76100487bc27.tmp
Size 9KB
SHA256 c37a469f20e7dafa7510aea6429b55af0486eb69951640654a26bc625f03bdfd
MD5 9cba23735afeb679f8278be4242a1aaa
SHA1 fa29f2a7159b953cd6ab1f778648c3d0c980c0fe
SHA512 d8d2e2f6976c9a3c468119da47e7d2a46e2234e67970087b76e10e88035cb780a0dbec9651ae20fba41bde58e3c834d7b9f2c815863f2d91915ffedf259d97c8
SSDEEP 192:sxZSRXWa/fYsHHKIdpdsHW6+WNGYaplZhDIg5+J:sxZSoa/fYsHjaHbGzs
TLSH
T1C822A6126E28B97B8CC7D20DBA55BF13D6F9503291D41E48EAFC9A1C05E76DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd96f0d1-91f9-4fd4-ae73-fa3f28ad57a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd96f0d1-91f9-4fd4-ae73-fa3f28ad57a6.tmp
Size 27KB
SHA256 e607212f267de18de1c7ead4fdfb31ce3e1c0b6bd0444dde10689fdd25989139
MD5 63193b288b61721b9799fcda9627e466
SHA1 fa4a2af91d1b46ddb614d1bafb7250998af4519b
SHA512 5663075286b0433a22453efcecfca5599c00e4fdd807a4f1fa31da60e15085e1e02e45da8380f123c8cbf68afb8259a4d909ffd47f283a170027eb935af3e708
SSDEEP 768:+eWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7iro4HfeomRa:+eWPcLKWvKeEeu1jaClLiF754HWomRa
TLSH
T15FC2FB2F644CCB7E5FC01A9DDC5A6FA77E9802C79A584D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d4e316ef-6776-48be-9bb8-e18cdca5a6e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d4e316ef-6776-48be-9bb8-e18cdca5a6e2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca1db908-d5ae-4e44-92db-5446add7f76c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca1db908-d5ae-4e44-92db-5446add7f76c.tmp
Size 21KB
SHA256 b5ee362e61a0608f93414971d7556fb102f042388c196d82ca7fc9f2563ee402
MD5 6f068d04eba140e52b9621185bbfc168
SHA1 57c0d42e934a558b40b0f9e0f2dfa1a32b599cd0
SHA512 e7cf086b4b758a8da094d6cbc593363f7918d0b77849c3c3126d630777da10155735c771d886c010393dec028fdadede04ced57a3ee56fcbf267848ce83c70da
SSDEEP 384:IiFzQkUSvxzsNc8TUNTUlIlJK315fZzIGmDP8ouXCIiYHvaTZcFHnIIl6:TFdBdwgC3/lsh+CIiYHvaTZcFHnLg
TLSH
T194A25D7398A8FC3B9EA79A40F54A3613DEB44077C9C4AB90E7C9AE1C01DB19C134BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7d65e66-bf6c-4950-9705-d8cf7476c48d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7d65e66-bf6c-4950-9705-d8cf7476c48d.tmp
Size 8KB
SHA256 65d8c107200d9f78adadd6a1b1991d1b3ec083d487f25fcc942ac71dee8196a9
MD5 c1ee6154dbe65e86995f29490465e241
SHA1 7e695b61a08a8f288b58de2a67f2ceb6b3f936d2
SHA512 8f2e2d044850db5bc99deb050e2c9f4567ebe8814da42715b0bd44042e346aa25a22beff52b5b8d53ec086a9bdfd5b956192b5079645b863327fd00dc9bdab80
SSDEEP 192:iONV6IEiQmiUyQxTbuIGmDnjzorbhRUpuX8727HYOqDU6:iONV6DeJbuIGmDP8ouXvHYHU6
TLSH
T133120A36A8B8FC6B6E93A844B4873523AEB54137DB896F50D6D82F1C01EF25C134A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f355a53a-dcb8-4c55-9f47-beda407cbc4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f355a53a-dcb8-4c55-9f47-beda407cbc4c.tmp
Size 18KB
SHA256 7f9bfc66b92e98450cafe35ed862d0a00447a15a31391061d76383593ee9f094
MD5 99a76c996f23c341d3d51274a1662a5b
SHA1 dd2501e8ce8fe10798e3a748d0ed972d1bc10d51
SHA512 e0969443a647002aa2fa131fc016e4e6b2e21a37ae38ea4d043270ae70d5a823f970cc54edafd8ce7e534512d03ec6da795467386c0aeb39f27ae76d3b442442
SSDEEP 384:BQkUSv0sNUJK315fZzIGmDP8ouXoiYHvaTZcFHnIIl6:z0E3/lsh+oiYHvaTZcFHnLg
TLSH
T110826D72A87DBC275EA3A540F54B3A17DEB48037D6C81F90D5DDAF1C01DE258238B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f94fc1cf-98b6-4fac-aa71-8409319b4bf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f94fc1cf-98b6-4fac-aa71-8409319b4bf4.tmp
Size 8KB
SHA256 785590b00113e443d923971e9df6c08895e99ef8def9ca91bf930ace24b3442b
MD5 0669fd6e746bb8dca134b86a4d4fae51
SHA1 7ed46690eb7ee13074b93046311c548de3a8c643
SHA512 849c3b1d86bd0ef8ca50c4797638289aace57f7f1d36323358a77e79a9a6737b69ce6075d7c2deb69ed9d4fa169f9eb2891346703dc92d1d4d820bf6a616d7dc
SSDEEP 192:aONA6IE7QmiUycxTPuIGmDnjzorbhRUmC7sY9PU6:aONA6DtzPuIGmDP8ysYRU6
TLSH
T1C602E935ACB8BCAB9EF3AD09F4473A23AEA4113BD6D56F54DAD41E1C00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 71df6890727d500bdf5183b3ab65a1bc5955171924f6900aac338310119a3739
MD5 4893c295d273a9adec554bb75ffe93fa
SHA1 e1acbe4ccef6dfa2ee5b00ed5b7e21310323ecda
SHA512 a843d2e6217c78debc66f06a6fb2f6383457d6b2728ce39efddacf19283851c6c17b4833a2836d3b65fdf6f6a56d4937b3d6dd9e074c43ccb4bf58d1e49520a1
TLSH
T134410858B6EE1148B3736E0A9BF6A86E487FBC772F0AD56E00110D4F4662E40CC61B37
MD5 SHA1 SHA512 TLSH

Submit Download