dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample261110-pkgvfatsd1
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1700	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{1A41C701-CB65-4AB8-9528-5F8A0A6BDA29}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 3004	1112	msedge.exe	84
PID 1112 wrote to memory of 1700	1112	msedge.exe	86
PID 1112 wrote to memory of 1880	1112	msedge.exe	87
PID 1112 wrote to memory of 1880	1112	msedge.exe	87
PID 1112 wrote to memory of 1880	1112	msedge.exe	87
PID 1112 wrote to memory of 4440	1112	msedge.exe	88
PID 1112 wrote to memory of 4440	1112	msedge.exe	88
PID 1112 wrote to memory of 4456	1112	msedge.exe	89
PID 1112 wrote to memory of 4456	1112	msedge.exe	89
PID 1112 wrote to memory of 2152	1112	msedge.exe	90
PID 1112 wrote to memory of 4456	1112	msedge.exe	89
PID 1112 wrote to memory of 2152	1112	msedge.exe	90
PID 1112 wrote to memory of 2152	1112	msedge.exe	90
PID 1112 wrote to memory of 4476	1112	msedge.exe	91
PID 1112 wrote to memory of 4476	1112	msedge.exe	91
PID 1112 wrote to memory of 4476	1112	msedge.exe	91
PID 1112 wrote to memory of 4132	1112	msedge.exe	92
PID 1112 wrote to memory of 4132	1112	msedge.exe	92
PID 1112 wrote to memory of 4132	1112	msedge.exe	92
PID 1112 wrote to memory of 1776	1112	msedge.exe	96
PID 1112 wrote to memory of 1776	1112	msedge.exe	96
PID 1112 wrote to memory of 2960	1112	msedge.exe	97
PID 1112 wrote to memory of 2960	1112	msedge.exe	97
PID 1112 wrote to memory of 1624	1112	msedge.exe	99
PID 1112 wrote to memory of 2664	1112	msedge.exe	108
PID 1112 wrote to memory of 692	1112	msedge.exe	109
PID 1112 wrote to memory of 3888	1112	msedge.exe	110
PID 1112 wrote to memory of 3228	1112	msedge.exe	112
PID 1112 wrote to memory of 3228	1112	msedge.exe	112
PID 1112 wrote to memory of 2208	1112	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2bc,0x7ffa8324c188,0x7ffa8324c194,0x7ffa8324c1a0
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1688,i,17609751050988242641,5219680687148138149,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,1892189908157624030,8302513195704921151,262144 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,213407065441914068,1500619545531446364,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,1040738295348525317,14034809987549631015,2097152 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,6642101426635313140,12243391006697898157,2097152 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,14955097876191763704,13929234913345050348,2097152 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,11103572381038029521,13179952991312408517,2097152 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,200829326369594795,5727136801793988802,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,11740784266352260535,3433995437337986692,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,17291874206427949538,2795625077096381787,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,17291874206427949538,2795625077096381787,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,3563174526544248998,350185575594090649,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,8378093405661013186,9809509539485497428,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,17933354218298323261,8949352015083973576,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,14094171218369284841,17066192766856728147,524288 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2128,i,2777388418838710092,5976393610084550382,262144 --field-trial-handle=2288,i,12921293529766937700,14824485158221382116,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

003e6335-e5a0-498a-80e8-7284d98ea44f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\003e6335-e5a0-498a-80e8-7284d98ea44f.tmp
Size 8KB
SHA256 c305875942105ce1912c96a74efff8be63ab021394fe05b8962dd900a063754c
MD5 9a1215cb49a36ec61abc7f8d50bbd891
SHA1 d1d9d86f60529fe6992d7496be487e3f7d7822d4
SHA512 52e8f7d2593e9f831b45c65a696664f9c50305b06622b592bedff9e5ce3afdcfed4aa33ba346728303bed74289b418abdeddf38582f38b17a393071ab3f1c036
SSDEEP 192:GON+6iDqQmiUy9bKq5u88PjO7FpuZpqLU6:GON+6beKq5u8ijOBQ2U6
TLSH
T1F212193668787C6B6DE3A950B54736179EA5423BE7887F80D5EC672C01EF29C130B513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

741f0b4d-8313-494d-bba0-fb0a0d1f2f06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\741f0b4d-8313-494d-bba0-fb0a0d1f2f06.tmp
Size 18KB
SHA256 32293a98aae08e21278b00189450f9e65b7006a19c4c6dbb3ef8861fd748b4d3
MD5 65dfa93d69c741f9d21b804093d426bb
SHA1 23262e479f8451e33598dc4037a2159b3d5445b0
SHA512 36a81c08679a4f925121c35fad3ab7d23b61dd0dd0db53746287bee2facee95e431b69fdc3b8b932a3cfe348b992348093ec92ded3861460b7c3d7c633419607
SSDEEP 384:j2QkUSv0sNbJvFK0up5u8ijOB+2vaTZc7IIlV:jW04ckJ2vaTZc7L7
TLSH
T163827C3168697C2B5EB3E550B54B3B039EB08267EBC81F94D5DDA72D01DB2D8234BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

997f2f61-80e3-4354-b9f8-b584e0a24cdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\997f2f61-80e3-4354-b9f8-b584e0a24cdc.tmp
Size 18KB
SHA256 653911c053c0ccfee057530ec86b4d7318d623a1d7a3f9b55ad7a72b520c29b3
MD5 1a58cc43a6944ac90a6f2f166cdbbd36
SHA1 d351e011af21bc0dd68f76d555866392aa989332
SHA512 c2fc2ea731c98c0b695868cbbc9122ff6a5fb09c4762f973e2e6bbb65e0fc90d05a1115e0a64d7b0c5387facfb1efb550b19a7d912087325dcebd4033233d53e
SSDEEP 384:r2QkUSv0sNbEvFK0up5u8ijOB+2vaTZc7IIlV:rW0TckJ2vaTZc7L7
TLSH
T1EA827C3168697C2B5EB3E550B54B3B039EB08267EBC81F94D5DDA72C01DB2D8234BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c921c4a-6b38-49e8-9bc7-75adc5f37769.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c921c4a-6b38-49e8-9bc7-75adc5f37769.tmp
Size 8KB
SHA256 69c091d496e3edf04b4aa0546a85698a54ef666a7c63a8a5550f291d0eb1fda1
MD5 619dbd9866be4ecc71da5e2ac2d20870
SHA1 80f64a31c352834f0d2feefc60dd0eb2840715c1
SHA512 d7a4be19bca89b8815fa3a85acbb9190f3b89932e15857d8f611b9596e1fafad3cd570d4afe5b4edd09426391797f8fae920651eee7c00481bf48f0ee84bec79
SSDEEP 96:PqONkNQsjpfwDISp5ih/cIPURHl8h4otop5+mDlBfPGxvw45RxmJm78lFUxFqseE:SONV6iDCQmiUyxbHq5u88PjaSqacpLU6
TLSH
T1BA02F739AC783C6BAEF3AE05B5477B179FA4013FE6952F84C9E81A2C01D729C1307522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

095a0f49-86b7-42ee-a015-54d86437fb23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\095a0f49-86b7-42ee-a015-54d86437fb23.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

351301c7-1253-4668-afc8-867d622dca8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\351301c7-1253-4668-afc8-867d622dca8b.tmp
Size 10KB
SHA256 1c5f5866f52122d1231814ef2da30d9ee9fbcdb633c937914e53b5b9021a25be
MD5 06dafac16f80eff3e32f57a0088e60e7
SHA1 927ce2e444e5fea38c618d2a277aa301e877934e
SHA512 a3cd7d45130d365df7954bb1eb6ba6602d1602529c8665cc37c0f1cd9f93965f244bedc3de536f13b4316d22b4024c16b46ffd6282970ccc7c86f901bf8efe42
SSDEEP 192:sxZSR3WD/fHsVdtfIdpHBHW6+WNGYaC8IjpIg5PJ:sxZSsD/fHsVdtQhHbGqRz
TLSH
T14522C7526E28B97B9CC7E20DBB15BF53E6F9503291901E48A6FCDA1C04E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68a6253e-5a6b-4212-bf66-ab3aa897485a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68a6253e-5a6b-4212-bf66-ab3aa897485a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

83377dee-fbc8-484b-80ff-466be2377fa0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83377dee-fbc8-484b-80ff-466be2377fa0.tmp
Size 10KB
SHA256 a42f0a27991f1b9f09208bce093e5495acc428facea4c108803c12b618d45ebe
MD5 bbf737d1917388231ff6b05993b1180e
SHA1 3efccff2325c994852ea018d23c22d9b7e621163
SHA512 2da9a52939f8ffdfd4063c77cd94c0fb58dde847cd0fa1356af9907a6d4110c314f1365b898720e2f756ebe30f6d48beb2c848a0384cea6e7d6d5fd750367a8f
SSDEEP 192:sxZSR3WD/fHsVdtfIdpdBHW6+WNGYaz8TjpIg5PJ:sxZSsD/fHsVdtQzHbGroz
TLSH
T1F222B6516E28B97B9CCBE20DBB15BF43E6F9503291901E48A6FCDA1C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88ae839f-6b13-48e3-8a69-6016ab9f932e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88ae839f-6b13-48e3-8a69-6016ab9f932e.tmp
Size 27KB
SHA256 d1e85b3263f4e3547dc4f900098b85247223117326166d1a1fc3ecccdcb25f6b
MD5 38eff92c52272b4b33d3b6cb831432f9
SHA1 a37529bc849caeecb5f81d8038fae180a08c202a
SHA512 28f5d218c219f556675f725d60f4b3744c35ecc2786db29176e6b025b28e140e8c55f742f47c1dcb54d81f5c68848342c2b4cdad0035774e0192a1f68f983ef9
SSDEEP 768:4xyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3jroaZrr:4xyQRbrWvvlpZu1jaXKLf33QaZrr
TLSH
T1D2C2FA3B640CCB7E5FC01E9DDC6A6F976EA802C796588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9d53e0a0b3b664f2de381c30544f644ab0d5fcb60aa1430cec3e402fc10ffdc6
MD5 2dff548499ddb74208466ed40eb8cc83
SHA1 0b7b20d3bb33c9a25ecf42b2d39cff1dcb0f2963
SHA512 6548539eff8c2af045c870bece50542c317b31748c77b9f0c3e40195835e08f720b750dbe6d2d26f14bda5cc7c8e4f3cf14bbe51797d94eb892ae758c5b18ae9
TLSH
T1CE6153CA5ED0287BFF6865B0C1FD144B3B3034B045631F1A28E6F8741E8D7882D96238
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b4b4b785327f0031e0aa85b27f77bcfa6a925d3d2cc2bd9a533fa8460b87f7e9
MD5 8db2ced16cea8b52f58150966ba0c725
SHA1 d368e75cd96b429b2fe8fb18f3f6677afb7c6767
SHA512 36b8c4d20adc0bae9150d7561b00d05e511071030c3ccc17bda41020302c68fd705e6e550611e2b3358b42925950dbd2eab0871089dfab27c8ed0ca2a820297f
TLSH
T1A56142CA5ED0287BFF6865B0C1FD154B3B3074B045A31F5A28E6F8751E8D7882D96238
MD5 SHA1 SHA512 TLSH

Submit Download

66f5311e-8e8a-4c60-8409-d97ade5f4c3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\66f5311e-8e8a-4c60-8409-d97ade5f4c3c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

28e636ff-0e09-48e3-99bc-f57c99fa45b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\28e636ff-0e09-48e3-99bc-f57c99fa45b7.tmp
Size 1KB
SHA256 b0ecf07944a0d11303da054d0e550c2d150ed3cd3b3c22f7f3b64c250a191d74
MD5 c8b304c38e3cdfe3643e08050f5fc1af
SHA1 3d9c08f8a15a393c5d8b11131e5d6d4da568151a
SHA512 e8132e7b948787964019bcd42b8cedd1e7633ed098e1bba9ff51fb4fc1f44f74035a215a244d18452978b14d1f936d15eb304f80b9a2ba6801344cd2e5343f9e
TLSH
T13711ADF3C3E5866E890556F05A14AE1BDE1C0516822C3C1586D4EF2B93F3075D00155F
MD5 SHA1 SHA512 TLSH

Submit Download

587506c3-37d9-4ef3-85c2-8339351ed123.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\587506c3-37d9-4ef3-85c2-8339351ed123.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f6b8eaab-d844-422c-8e0f-28f0350700c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f6b8eaab-d844-422c-8e0f-28f0350700c1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b90b91957f95923c3a58f96451ab9a78777bbfc001514d12f0f0d3ebfc8251ac
MD5 b89ebda029a9229534c53355b4d6069e
SHA1 e879de224a76d84d0194e64ef2cdc65803a85462
SHA512 7c90e583b1ef175f4d31f5b75be2eb6e626bca4500394cbf3d89e88b288fe3796238104c13f163ba5c01f8fa152ccbbedd307a1bbe7b7f60cd9d7095cc04f921
SSDEEP 96:KgHmKQou6ucK3q8t0BdnDfkvDePh1kKJBh1VAZVTLLOF7mVT1OK7d:AV3lt0BdnDfyDeJ1pBh1VAZVTLLi7mFB
TLSH
T16C91F051707B064038BE259882768A5A564231F33018F66FBFBC41E56E6FE085EFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c91c176f-979c-4847-9010-79c10a4c1384.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c91c176f-979c-4847-9010-79c10a4c1384.tmp
Size 9KB
SHA256 144fb488436957d82cdf29c221e0b6c13c1a398ce392ea7f5208c9c192e8e699
MD5 e3fe2cf9ba0ced7b9b1ce1101a86db74
SHA1 adacbfdbafb92715fff67b1bd8f40a9124655220
SHA512 d44c2427467b81d24c75d9d6405d3096014e6a6a034f99914374320b256c3eb8711bcc2abab0abe1bcde417461ba8eae0b6cbb27b1a3c2d5bb3b59a4afd5fb60
SSDEEP 192:sxZSR3WD/fHssdtfIdpdBHW6+WNGYaJpjpIgrJ:sxZSsD/fHssdtQzHbGd9
TLSH
T12C22B6116E28B97B8CC7E20DBA25BF53D6F9503295941E48EAFCD61C04E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1b192d0-3826-4fb4-8444-66168c72d60f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1b192d0-3826-4fb4-8444-66168c72d60f.tmp
Size 9KB
SHA256 dd736b66bacdb897d6b0a5bb409a8103b95f052aead7526e43967a7864339467
MD5 e5d9fc640a203401809d86e189cef383
SHA1 5c229b41f5b2a2daf25140dad58a3b215aeb8cc8
SHA512 2ee1212530f8a6c39b372d1ffea5f5dc872f0245c78aa894967bebcaf663d3ea61c74596c494ff5393d12a620589d2d826d200f2b0434a29369664d20ea77230
SSDEEP 192:sxZSR3WD/fHsddtfIdpdBHW6+WNGYaJpjpIg5lJ:sxZSsD/fHsddtQzHbGd9
TLSH
T18A22A5116E28B97B8CCBD21DBA15BF53D6F9503291901E48EAFC961C04E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f6bae23-23d0-4709-b664-22da38c917f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0f6bae23-23d0-4709-b664-22da38c917f7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ec339f55-3f5d-4fea-b490-f9740e9d78bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ec339f55-3f5d-4fea-b490-f9740e9d78bc.tmp
Size 21KB
SHA256 9652867b692c5b2eab9784f5f2d4ae1b7f8cb9d370ea3e5a31310b72b907c00d
MD5 b90e75a7b16a110123b2520425ea5666
SHA1 48ab3d7ecef1bb980b1e3d6c35023e1746258791
SHA512 0192bf0b67e0a41ee6de06dc82f8b65823c538fba467e5152fd8fda5bb7cfea530801341821a0f5cbb677dbfeb2d516ef85d9b6c696e0a2e991abf8ab17e7357
SSDEEP 384:71iFzQkUSvMzsNl8TUNTUlIlJvFK0up5u8ijOBh2vaTZc7IIlV:78Fdwcwg/ckE2vaTZc7L7
TLSH
T1AEA26C335898AC3FAEB79A50F64B3703CEB04167DAD46E94E6D9962C01DB1DC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3440f3f-0bc4-41e8-96bc-93b7c11a9ecd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f3440f3f-0bc4-41e8-96bc-93b7c11a9ecd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e971dd8ebbd63cf5ec53ea76d367fa85ec7adb4dbc000e4d524c2ba6ed10b2a9
MD5 8fe58bb8e70145a96e583197eb8d405d
SHA1 f314f9f9045b874f421b11aebb585b178118fa21
SHA512 ea0ce34671853fd74be879414473f5cf17efc050938cd757c74ba700fb6237eb13d33675b998da74df28a1ba11ca935ebff1e6dd1a9a6e4d92ac5169e9ea99f9
TLSH
T166412B5CBAEA1148B3B76E56ABF7B86D447FB9732E06D45D00110D4F0A62B40D861B37
MD5 SHA1 SHA512 TLSH

Submit Download