96d4b485f42e07c014fad7568331f6ffe86d50040c8dad5029b6e12378d2d805

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
suspendedpage.html
Size 287B
Sample261110-phy1yaas2p
SHA256 96d4b485f42e07c014fad7568331f6ffe86d50040c8dad5029b6e12378d2d805
MD5 daa6c6775e11e7f10fa8f38843522751
SHA1 1e05dfc94fabb59b21ecae81bfb173542c4f424c
SHA512 c93fdb9503de7836628a76dcc03151b0870900fe89f4ef62a25b0cd6da80a6c1648c7bb204f1b082e39fe255ebb9c0664cee111fa9b2de16c1b21730e7eed9ac
TLSH
T112D0CD59D45D200C590425E0B9E138F888C4455015CFA5C09C513176A5499D74B1929D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2548	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{74F3D0C9-2B83-49C0-A3FB-D13F827D913F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4892 wrote to memory of 3860	4892	msedge.exe	89
PID 4892 wrote to memory of 3832	4892	msedge.exe	90
PID 4892 wrote to memory of 2548	4892	msedge.exe	91
PID 4892 wrote to memory of 3832	4892	msedge.exe	90
PID 4892 wrote to memory of 3832	4892	msedge.exe	90
PID 4892 wrote to memory of 5456	4892	msedge.exe	92
PID 4892 wrote to memory of 5456	4892	msedge.exe	92
PID 4892 wrote to memory of 6072	4892	msedge.exe	94
PID 4892 wrote to memory of 2352	4892	msedge.exe	95
PID 4892 wrote to memory of 6072	4892	msedge.exe	94
PID 4892 wrote to memory of 6072	4892	msedge.exe	94
PID 4892 wrote to memory of 2352	4892	msedge.exe	95
PID 4892 wrote to memory of 2352	4892	msedge.exe	95
PID 4892 wrote to memory of 4316	4892	msedge.exe	96
PID 4892 wrote to memory of 4316	4892	msedge.exe	96
PID 4892 wrote to memory of 4316	4892	msedge.exe	96
PID 4892 wrote to memory of 1420	4892	msedge.exe	97
PID 4892 wrote to memory of 1420	4892	msedge.exe	97
PID 4892 wrote to memory of 1420	4892	msedge.exe	97
PID 4892 wrote to memory of 4624	4892	msedge.exe	99
PID 4892 wrote to memory of 3888	4892	msedge.exe	100
PID 4892 wrote to memory of 4624	4892	msedge.exe	99
PID 4892 wrote to memory of 3888	4892	msedge.exe	100
PID 4892 wrote to memory of 2020	4892	msedge.exe	102
PID 4892 wrote to memory of 2580	4892	msedge.exe	106
PID 4892 wrote to memory of 3408	4892	msedge.exe	107
PID 4892 wrote to memory of 3512	4892	msedge.exe	108
PID 4892 wrote to memory of 5924	4892	msedge.exe	109
PID 4892 wrote to memory of 5924	4892	msedge.exe	109
PID 4892 wrote to memory of 1160	4892	msedge.exe	111
PID 4892 wrote to memory of 1160	4892	msedge.exe	111
PID 4892 wrote to memory of 1800	4892	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\suspendedpage.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd6b7ec188,0x7ffd6b7ec194,0x7ffd6b7ec1a0
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,3161944794227658054,15463873277879091141,262144 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,14419659265061651741,5669217374888197011,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,8429344283083963978,13732971110308149660,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=2700 /prefetch:13
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,16307641351726629451,16445961335965618578,2097152 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,11734235336236449250,16467667018546178649,2097152 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,14462072084309542175,15523156099329685179,2097152 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,5702814067450950239,8137278959289681648,2097152 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:9
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,13740014069348030694,13667905379498050112,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,4704559824102507374,6918418692669345362,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,3860220650659671468,12146954632500406374,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,3860220650659671468,12146954632500406374,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,4245840023576883949,17742605860905777048,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:14
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,16607692042066784840,15252075061667281774,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,14968567415501156575,6621714952036227533,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,6903143433905030024,15541755115914536992,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:14
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,13160974235161078940,5402878482750295848,524288 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5472,i,17224373278994582149,9535970225011599357,262144 --field-trial-handle=2552,i,16810845303204510681,7921401203911343296,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

42141def-3eea-470d-ad42-a7fe34eae09e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\42141def-3eea-470d-ad42-a7fe34eae09e.tmp
Size 37KB
SHA256 36f00a6c9f0f54a57dfb049049a513cfd5d9176b2529a27d48f749fb016bd28f
MD5 f2efd5cda53263832b78f1f6a9881ca6
SHA1 153b76d5d82b0d7a6333c4f786a07730d9a25d31
SHA512 1f09a331695e726de25c74f63835ca0baffdb97bdda7b2f9ee7415d5133914a28b2f08197707e9c72c2bc2e05269ac2dc3ab167ef08404acf0a90ffef68c957e
SSDEEP 768:NFd73Fwg7CYgm1t4ZDmGA5b65Q92RQMPbl5aTZc2dLH:573eAF65dQ6Mnr
TLSH
T19D03BF33DC84EDB7ADB99AC0764B7206EFF08263C4C89690EAD96E1C01875CD034BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fbfd31c-4283-461b-a26a-1c3bb1484133.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6fbfd31c-4283-461b-a26a-1c3bb1484133.tmp
Size 35KB
SHA256 e2de20caa10245b5e8d05144eb1c31c0825770f8250647fb1818289ce1939d1a
MD5 180f1eeab406cfe5cd755fb2660c20b0
SHA1 f725b950ec7a8a9fdabb5c40bf8b274f430415b6
SHA512 4b67a1e72e9721253fab227d5add7a628b735c3df9a0acb7c2aecd8f88acbdebcf910ff8c154569c5c0cb17c4cdde38be3e320c276bf66ade0950da3bbf19e9b
SSDEEP 768:/L36CYgm1t4ELDmGA5b65Q92RQMPbl5aTZc2dLH:/L3ANAF65dQ6Mnr
TLSH
T14FF2BE32EC91EDB35DB592D0364B7246BFF48223C5C8469099D96F1C02CBACE535B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91e9786a-6ba5-4ff7-bb25-ed95e7a7c288.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91e9786a-6ba5-4ff7-bb25-ed95e7a7c288.tmp
Size 35KB
SHA256 67daddb9740a882ece04b8183a8e79d0d79487659bf15d9a1db8c19e11cd6291
MD5 43d69389c216ca6029efdd1b541e9ff4
SHA1 bd8c4f00d3fdc8e06defce99c2224d48a67b45f7
SHA512 76fd4e0469c69e49126874d1571c523f3fa146c1103d5a85b723119660f4e7d789787d4114319ea20b0657d52f9f810878ccd1e12e58461d92cfc0892ffbc930
SSDEEP 768:xL3pCYgm1t4ELDmGA5b65Q92RQMPbl5aTZc2dLH:xL3/NAF65dQ6Mnr
TLSH
T1F8F2BF32EC91EDB35DB592D0364B7246BFF48223C5C8469099D96F1C02CB6CE535B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

60ec695d-8bde-4523-8964-ca87039f5073.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60ec695d-8bde-4523-8964-ca87039f5073.tmp
Size 11KB
SHA256 d0ea53d91e5475d5fdc1f7c08cf6492d5b5af85f404fe8aea6cdb414e2b6319c
MD5 06d141e2c36f1db329aa9f7badfbfa69
SHA1 9f31a178e38addcf79e37c9fcb110292c11e9457
SHA512 df27796e394801dc9ea19713866ec4b88a8a4ee80b8900fadd3a6121e6e5288c55a73f8e0899ef4ccacbe4df4f20664deabc6ecc3cebf7e1c52ce10a0e9a73f4
SSDEEP 192:sxRiRYbG/fsXsCyYhfzoA8p4z/g6+WNIY2FF5cZGzIgIJ:sxRiYG/fsXsCb22/5IRaEs
TLSH
T1C3329715AE28AD3B9CD7D61DBB6A7F53D2F95032A4901E48E6FC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c62b811-c1aa-4e5f-b6a7-59c23a206ae9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c62b811-c1aa-4e5f-b6a7-59c23a206ae9.tmp
Size 23KB
SHA256 930742a9bde1dd2a877428e3c4ea232135224bcd76ce604b9d55fb33f82f8a61
MD5 b5f8a8ed6a3fba56f92ef20f4aee044c
SHA1 aa196ced8091ba54f6dde4b870b03f82a94456a9
SHA512 48fa3366071a1e18b31a0191de5c93e13529ba3713cd554cb4d67ca8d6896b6c3cb755fccb4946a7e920101021842e77569ed2cfcb3997835353218c13dc8d0c
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWzroHrM:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0V3
TLSH
T1D7B2EA2F644CCB7E8FC00A9DAC596F977DA802C796588D4047FE994C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 2c957d4ea681f467188d64750c8397a71225a4545f82cf3569689f55ef03a368
MD5 8c2a0f9e49a0c57ddec643751434734d
SHA1 b01bdcf3b9cd4cb68866e5e2d3551905f050b3f4
SHA512 ca744081fe31bea9849194a526a0afa92e525359fcf24dc2a0ddd4820ec89ae1d2b6de07eda1af971e020f7728592ab26f6d004c84e30d9744d0ec4943d7bde7
TLSH
T1FFE026C4A8E8C23FE3086A6701BE530C8AE0361B93C4698E2744C9C47081288ABB36D4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 035799f97af0ed01dec9971a43d9821b737914797f39b436c56c480686c221d5
MD5 3dd65a8306cef8260a82718ab3830544
SHA1 71f1ea280c3af571da5bd9cf06f499fe35395c4f
SHA512 0f0d5799a468552f08670e9d542acfa3c5907fa56f9810aad85453fa5bcfc915822fb28f041e3b645231b891dbe866d1f5b35f20e887c7143bd5b88d4cb0b308
TLSH
T1E6512E8185916756FB9F0E31CAD802873AB046F151CB5E02BCECE8B84BCB7C48265DC8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fd197c62d6ba18dafb3e1c97b31b6dabb6d1dade2b889a4c129b002392a5086f
MD5 d1607018fc9794532eeca52ddb06d4ed
SHA1 d005066cd592f6f4585932baa248d1dd9834b32e
SHA512 392bcf57f3f321a2b93ade0a394415a91206a12fc687b201a3a94672bb44de227f8b52dc87ea8ea0db46ad4d6330862dfe3dc0cbef643b78cc31ac2b7ba4aa57
TLSH
T1A1513F8186916756FB9F0E31CAD802873AB046F151CB5E02BCECD8B84FCB7C48265DC8
MD5 SHA1 SHA512 TLSH

Submit Download

7a72c228-a692-41f6-9d4c-f1320ba1e840.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7a72c228-a692-41f6-9d4c-f1320ba1e840.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3081f53e-e8aa-4cf2-bb3d-7a2a222dbdda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3081f53e-e8aa-4cf2-bb3d-7a2a222dbdda.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

5ebab8cf-96c2-4b03-bfe3-0ab029dd97b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5ebab8cf-96c2-4b03-bfe3-0ab029dd97b9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9816690b-1b57-4eec-8020-6140a4341eb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9816690b-1b57-4eec-8020-6140a4341eb5.tmp
Size 1KB
SHA256 2e3b50f571accb83ed832aaa6d6870a52524a2cdb3a6002376c2c373c17e28b2
MD5 152461a81bfd49f7350cc443ba015276
SHA1 655f39d25d3ba181ff2950e79eee0e69d7c3055a
SHA512 cd7631aa96286097c9dacf0dff40821c81c77a8d846e9b3dc8b24ca5a6eab72c3232aacdd3eb6232dbdc186d4ebebe18b83645b666b62a7ce0365cc5c1f53750
TLSH
T19231C0F783B4857E9A1186F0EA14AE2FCF2D0515432C786985E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aa2e4474-b820-4e0a-908e-640962e622f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa2e4474-b820-4e0a-908e-640962e622f7.tmp
Size 11KB
SHA256 90e4a6440252325467fe2375795d819fb599a6f3f4a65b7fe5992183d1c8a2f1
MD5 effce98b494ce9c6b64cc3ab10d945d3
SHA1 9a3cbfbdfe082716cf8300b5db74c1f9ed0da525
SHA512 3ae735ad1a94e1d9f7a5f85358eed04a59cbaeaa092ad859097924fe6cf43b4850fc06e2ce040dcc8afca7e1858d62bff0c0b61241a1bd5cae7b8690a03b9faf
SSDEEP 192:sxRlRYbG/fsXsjyYhfzoA8p4z/g6+WNIY2OFNcZGzIgDWJ:sxRlYG/fsXsjb22/5IKOEe
TLSH
T1B732B815AD28AD3B9CDBD61DBB6A7F53D2F95032A4901E48F6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac7813ba-1c2d-4015-8772-2d0c927ea52d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac7813ba-1c2d-4015-8772-2d0c927ea52d.tmp
Size 11KB
SHA256 73fb0bb61a601f187bc011135193388279b935f6267162846257be8cbb910b41
MD5 deab8a9d66cad3f48d5558a87d88e4d7
SHA1 4a6a106399abac285b4b344597f6a973bf2ca6aa
SHA512 545b5f8346bca1e47dfe8fb0cd6af506ebe79a614fcfacbbf2335efdae25ba667685ba029bcb53f0ac3a8236a993e33362a20d20b2f5a81717739fbc5929bdb7
SSDEEP 192:sxRlRYbG/fsXsKyYhfzoA8p4z/g6+WNIY2FF5cZGzIgDkJ:sxRlYG/fsXsKb22/5IRaEE
TLSH
T1CB32A715AE28AD3B5CDBD21DBB6A7F53D2F95032A4901E48E6FC861C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dffd2455-e73c-49bf-ba50-3e09429846d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dffd2455-e73c-49bf-ba50-3e09429846d9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bb3aa106-b316-4bbd-a920-9577fe4b7873.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bb3aa106-b316-4bbd-a920-9577fe4b7873.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 fdfee8430bc9db1c33b88ffe50e63a58beb3337b02c6f8b7c317a5d2710b22f0
MD5 fd05dff54720a4e29b65eb8daa6ca3a3
SHA1 4f74fc4836c4371c55f974d1db6f56780d8d11da
SHA512 dd95661167e8ba297787cd49383a3dc98fc12b98d761b89586efc5bd181bfd52cf3b39a5cdb7c0447bddb2b37f033cc1e08733104f9281676742e5a5d05cf0fd
SSDEEP 768:U/UxvxjgC+B3f1fugm1tStDmGA5b65Q92RQMPbiFj0O:BZj3+B3t13AF65dQNFQO
TLSH
T18B03C036EC90AEB39CF992C0374BA35AAFB84573D1C556E049E96E1D06C768C430B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b98ef059-bed5-4230-9417-5834134ee0ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b98ef059-bed5-4230-9417-5834134ee0ae.tmp
Size 39KB
SHA256 3e382d63ecff72e36aec6a940c4e22f002b83c34a7c40ac2bd35bb4fbcc7bd3c
MD5 2a1a3954de121cba9f1fc05cb60cb583
SHA1 a107478e15ec21af476d454e7d403eda662366be
SHA512 9c5e01c7b0553632a43c4b64ce4f112b60e2e5c22dddf24d1ce792c3852b52565c8c9489d7899709d7f31472df737b4fc93533bd86386078008c3513914ade2d
SSDEEP 768:K/UxvxjgC+B3O6+gm1t4EFDmGA5b65Q92RQMPqlFj0O:PZj3+B38PAF65dQVFQO
TLSH
T1F203D036ECA4ADB39CF592C0364BB356EFB88563C1C955E049F92E1D06C768D830B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d35c9b9-97e7-4ca7-86f7-48a4208add99.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2d35c9b9-97e7-4ca7-86f7-48a4208add99.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download