935a4ee84d49bfc0f83e3d385290e57820148e420dfcc2e43ff2bb19b3255d16

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 84KB
Sample261110-wthxesbw5l
SHA256 935a4ee84d49bfc0f83e3d385290e57820148e420dfcc2e43ff2bb19b3255d16
MD5 d30e3710509e585948a38ef651f27876
SHA1 a0b27e3febbc91b0edc9d2705f26218a62f99885
SHA512 6317ccce4bc1e257e13a401f12c7d03fc369c4b1fdf3fc0ec97f8f0f9292886984675f68715284b2b503e2e5bfc32a2ca620bc57344972de6f71c65ce6841751
SSDEEP 1536:o0txZavBmlSCo45SwBhalAC+6lq6avBmWY1EndvqXVfpleaeAe6QnhpJo1RMdONu:JzBMEJ
TLSH
T13B83922202608FB7981392DD59F0A71424F595CBF575E018FAEF112BCF8ECC4CA9A796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4628	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{3F372BD1-F2E8-4D2A-852A-1024D782561C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
812	msedge.exe
812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe
4084	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4084 wrote to memory of 4580	4084	msedge.exe	89
PID 4084 wrote to memory of 4628	4084	msedge.exe	90
PID 4084 wrote to memory of 5028	4084	msedge.exe	91
PID 4084 wrote to memory of 5028	4084	msedge.exe	91
PID 4084 wrote to memory of 5028	4084	msedge.exe	91
PID 4084 wrote to memory of 4396	4084	msedge.exe	92
PID 4084 wrote to memory of 4396	4084	msedge.exe	92
PID 4084 wrote to memory of 480	4084	msedge.exe	93
PID 4084 wrote to memory of 480	4084	msedge.exe	93
PID 4084 wrote to memory of 480	4084	msedge.exe	93
PID 4084 wrote to memory of 5672	4084	msedge.exe	94
PID 4084 wrote to memory of 5672	4084	msedge.exe	94
PID 4084 wrote to memory of 5672	4084	msedge.exe	94
PID 4084 wrote to memory of 3312	4084	msedge.exe	96
PID 4084 wrote to memory of 3312	4084	msedge.exe	96
PID 4084 wrote to memory of 3312	4084	msedge.exe	96
PID 4084 wrote to memory of 4688	4084	msedge.exe	97
PID 4084 wrote to memory of 4688	4084	msedge.exe	97
PID 4084 wrote to memory of 4688	4084	msedge.exe	97
PID 4084 wrote to memory of 5220	4084	msedge.exe	99
PID 4084 wrote to memory of 1040	4084	msedge.exe	100
PID 4084 wrote to memory of 5220	4084	msedge.exe	99
PID 4084 wrote to memory of 1040	4084	msedge.exe	100
PID 4084 wrote to memory of 4964	4084	msedge.exe	102
PID 4084 wrote to memory of 4536	4084	msedge.exe	106
PID 4084 wrote to memory of 5492	4084	msedge.exe	107
PID 4084 wrote to memory of 2768	4084	msedge.exe	108
PID 4084 wrote to memory of 2528	4084	msedge.exe	109
PID 4084 wrote to memory of 2528	4084	msedge.exe	109
PID 4084 wrote to memory of 3380	4084	msedge.exe	110
PID 4084 wrote to memory of 3380	4084	msedge.exe	110
PID 4084 wrote to memory of 812	4084	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff8a68ac188,0x7ff8a68ac194,0x7ff8a68ac1a0
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,7142329240686691748,3523112424903046678,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,805358369403929593,15024552643441110401,262144 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,3103774114469178269,6023673744740473040,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:13
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,16695681668932737600,14144662399080423658,2097152 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3704,i,297903972987740771,13514764002494020360,2097152 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4420,i,10546207251308047494,10374940908323111673,2097152 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4464,i,15689223324185753300,16557228451678664184,2097152 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:9
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,16460440344530757759,12252940410114725962,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,1372403412381833051,7463670801293359381,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,17241113484226474997,1752305612223241871,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,17241113484226474997,1752305612223241871,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,7725545380905697599,1885420218551335325,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,5276488260011497611,17327886247319652367,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,17484845425153102022,10342398095474288024,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3004,i,8427156530702866904,8086404971384455968,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,569137393564501404,3447497923740829418,524288 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:14
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=804,i,16472787157492674840,2451759002210472977,262144 --field-trial-handle=2252,i,5574260084933618628,17901026462360537909,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5d1ccf68-5a0e-43de-adb5-ce465e1d5f88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d1ccf68-5a0e-43de-adb5-ce465e1d5f88.tmp
Size 36KB
SHA256 6a212735f65aac41270cac198c0b8f87a6bebab3d79798111c696a4805a5a8b9
MD5 9a49ead62241d5857ec4d7dd3820d239
SHA1 b195f7cee03925626f9a3abad9db909284c7b927
SHA512 73d722f4b191fec30fb67bd0be82e8bfcdd55a5cc7072b33c6362cd1545bed1d5d9480dda7cc2500f25a0caa3ec58489af6133b343263209d07782502af8f314
SSDEEP 768:J4Fdo39wgD3WvwOn6v5fgGM1TnXMqOab3oaTZcLHLTLw:Ko3n3Pfgt1TnxO839qrT0
TLSH
T1A6F2BF73A855CD779DB6D7C0F30A7286AEF141A7C9C51EA8E6CD6C1D018B29E134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

646906c3-94da-43a9-8250-9f2ed28178b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\646906c3-94da-43a9-8250-9f2ed28178b2.tmp
Size 34KB
SHA256 9d4187749bf6a5eca2b7f76f6a0c6a0b91907cb75ff1f787280561959b755c40
MD5 fcbe39ef85ac777167ad0e9d7138d7b2
SHA1 31f88a9fb8011fc0ebcc6d4bce282ad4c2bda863
SHA512 d2ff584ecd0374d80d35497749e9bbbc4975ebec9a4c8f1deb8e7ee06a1ed2bc9b13f1d26f76a67b7cb0328eff394e092f22ce7c750e28273d912a373877dbc5
SSDEEP 768:kG3U3WvwOn6+/5fgGM1TnXMqOab3oaTZcLHLTLw:kG3U3Yxfgt1TnxO839qrT0
TLSH
T10EF2BE72A8659D734CF2D381B20A7286AEF18267C9C41E98D9DD7D1D01CB2AE534BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7bfd48bb-6a33-4e70-8d76-2a65579e08a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7bfd48bb-6a33-4e70-8d76-2a65579e08a5.tmp
Size 38KB
SHA256 ec2995e147127785f4a1358549d02e5c094eef80aac532aaff98f1a2a4bd77c7
MD5 7b7a9eceadcba42e95c75ede35ce0f38
SHA1 c8b575c3aae76d7ef51339cdf5a094ec50782cff
SHA512 edf0cc710f8c2551885ebe941563723be37f5e7410c1bd3251addbd6c3d85c8ecd90a8047add12c4e2ab09402786a50d1aee23f76b2e78ca85766a61b1c18c0d
SSDEEP 768:4/UxvxjgC+93cNwOn6+u5fgGM1TnXMqO/b3AaP8:FZj3+93Ycfgt1TnxOD3AG8
TLSH
T1D003BF36A9556C739CF2D385B20AA297AEF545A3C5C51DE889EC3D0E058B35E430BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

80e6f02a-93d6-45fd-82e0-85506218a55c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80e6f02a-93d6-45fd-82e0-85506218a55c.tmp
Size 11KB
SHA256 3b606de4636a8b72da5bb8fe990e5bdec167f1cb6aec4a09783c8b935e342d8c
MD5 a6710842195d8437aa767ef9b6ea87ba
SHA1 033734775fb009ceaeab0d9cfa8fd16c7d206923
SHA512 036937d75563747bd4b7dfe61bbc0dd65db657bdda6fb1e381a1f0b21b905959f75ed0b57ccfe4aee4a8f48952dfa3612aaa96461896a4dda4956e9da24254ca
SSDEEP 192:sxRDRlb+/fOszqkzoA8p4d/g6+WNIYRLo13j3GwIgDZJ:sxRDf+/fOszeY/5ILh3
TLSH
T16C32D855AD28A93B9CCBE21DBB56BF53E6FD103260D11E48A6FC8A1C10E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89dc7e2b-0aca-445c-ae36-9a3558ed0011.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89dc7e2b-0aca-445c-ae36-9a3558ed0011.tmp
Size 23KB
SHA256 c5a2c2a491126707df12d27e7756cf0bef0ae73521dd4cb84cd9305750ece577
MD5 1c2f94f49a7035c22236fc860070d2c3
SHA1 c7aaf299f30d7058e1f36f812ac887a8d920cc6f
SHA512 58e8c4f34aea92043a5f40e6bdf046b1370c88f72932815911bc14f837e5b4e385b03b2ae005ca56f40be06e0a52178bd001404776bcf281cf0e72aa6e54c3c4
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRk/roqYY:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VZ
TLSH
T123B2DB2F644CCB7E4FC10AAD9C1A6FD76D9802C797548E4047FE994C02C77FA921A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b7faefe-baeb-4177-adeb-75002abcc781.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b7faefe-baeb-4177-adeb-75002abcc781.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9f31349ef9bcafe565f0dc7a5191348cab0c3efac9bfb93ce621e6055acda79e
MD5 4ad7a7eefcc387a517ba08cb6089b334
SHA1 836d503235c5fb52aa63a651691978a6d36a7988
SHA512 60aaef030e762176f3be939a5ed9bed405c920fbe16241e92dd120bfaee24aa8e2bc43b62d2a3b142df9fe4c5464996b761db147bcfe551618282b85c350a1f5
TLSH
T18EE026C559C8C22FE748B6C702BCA30CD28037DFE3C0694E2758C4C87441A88BBA2A96
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 50f598b47b3fe5253706c69889630d8441f75d8cd3bcd7e8267604afb7695e43
MD5 73dbdb4c13b75f02ae0ce258ab3815e9
SHA1 7aebc4ac67f5e7ecad944c3c67dd633872d52414
SHA512 cdcdaf3555683b471a8ddb57220e29ff3ee5a43a858fd786bb4185829e678827f36667b97305eb4a6caf053cd8dd04d955ee04504b325ae643f37d72ec53f1a8
TLSH
T1AC61DB5C57927465E79C57B0C0D23CA7363DA2F23E833E428055E6B85AC7F2782CE015
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9e44c116347ebbf010c4b184ac654511d3414e037ba7998af644b7a2645e2c51
MD5 43c6a2bd477601637996a747d6064717
SHA1 104ddd1e9560b32c02b77318b6ebc1c93d582fa4
SHA512 48cf8fe7572fd678cab78caad2c10617448feace7af504358ff4fe24ab9b7a9933f941ec07f3eb9e7b5616dc7cbb16bd64cf23682a932de1fe1212a6e7ee497e
TLSH
T14561C95C57927465E79C66B0C0D23CA7363DA2F23E833E428055E6B85AC7F2782CE015
MD5 SHA1 SHA512 TLSH

Submit Download

7da0ef60-bd1c-4cc8-91a8-af5cb0f9693b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7da0ef60-bd1c-4cc8-91a8-af5cb0f9693b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3b185f63-56ad-4a04-95f9-f88b52544e8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3b185f63-56ad-4a04-95f9-f88b52544e8d.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

54de6e16-5991-447b-93a8-99736039a348.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\54de6e16-5991-447b-93a8-99736039a348.tmp
Size 1KB
SHA256 d23bab630f1e0529ea7498f784a125b7073ae4d30d1ba62c2257fbfdaf87f9d2
MD5 9c8c5188bdde72e49b8163feedad0097
SHA1 9903affb425184e9bb9850dd810ef5d8571dfbf4
SHA512 300c55f4c533c9d1e2155ec5e9395c02c87b2a4673a95ac08e0b75bdd3d2bbb10ae26c844b676d12454ab43a27d585c48d633a2185c5459aaaff240b46b4b04b
TLSH
T1D531C0F783F4957E9A0196F0AA14AE1FCE2C0515431C7C6AC9E4AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

c042370e-19c8-49d4-ad24-09d7a329f386.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c042370e-19c8-49d4-ad24-09d7a329f386.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 13440769dca284e996e6b79f3c78e0f4e18d8abc3cd6e15614e1a977b8eb5067
MD5 40d6b00df1d6f31a53aed1d109c412bc
SHA1 9b931abe900ffd1b5e8234726c553d6e6968428b
SHA512 59a2595037a5353cc5e3bbb190579fb49704c026749d371029f07acbb4742ff33008fa2f8dcb6be793d324a422df22ea10b8306dc3568206dbe79e644c969132
SSDEEP 48:KMGIPKDCk/ypFAxFvP/iZniRIo1iKjHLziXVyeKrlDs3zZlxkBlCPICrkKfBXRkU:KMGwKDC2qG8KLC8UwKJG6R
TLSH
T109913362727B06423ABD690D44E4972A958232B7312CED2B37BD40F6596FE144DFC8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c0861e02-24d5-466d-9e8f-e7ed03f505e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0861e02-24d5-466d-9e8f-e7ed03f505e1.tmp
Size 11KB
SHA256 15db65dc2567e94885fab994d9e751a237ccc4950e9133f92aee951e9f72ba36
MD5 5d0123d598049f97fe46f8ccf3652a40
SHA1 37d9f7aa20e9463dbc8fbfcb19ec977fdd4d3ee9
SHA512 f5b4ec19d2c0b1eba6a4861b1071724e1f3274f3c2969239a784a86e298627c17fa9bd641826e87ed56482247add4ac2d879db19fe65e53c2f4cf96c27fb689d
SSDEEP 192:sxRDRlb+/fOs4qkzoA8p4d/g6+WNIYRLFH3j3GwIgDHJ:sxRDf+/fOs4eY/5IOht
TLSH
T10332D815AE28A93B8CCBE21DBB55BF53D6FD103260D11E48A6FC861C14EB7DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f322142d-9901-4724-b3b3-98b9ffab67f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f322142d-9901-4724-b3b3-98b9ffab67f0.tmp
Size 11KB
SHA256 9281c09089a56de6ad3878da13f5e8996aa6e95d39de8804b7ba25e0b0c07c2b
MD5 f754389f5631e9b56ae34944618e8a5b
SHA1 907c704a7ebd810d3d7c1cfc10f99f63571f94f6
SHA512 5aab8eddf2a390243a3c98094eafcbd92ce493dec3a7dcb6a4ed0717f3f4fd95eb4dc652e606a41005d9f5ca03d97e0c69aee7750ec79318557a1b0a67e608a1
SSDEEP 192:sxRIRlb+/fOsWqkzoA8p4d/g6+WNIYRLFH3j3GwIgIJ:sxRIf+/fOsWeY/5IOhs
TLSH
T13032D815AE68A93B8CCBE21DBB55BF53D6FD103260D11E08E6FC861C14E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6d883dd-b8bf-4a35-8baa-6a1be3db9961.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6d883dd-b8bf-4a35-8baa-6a1be3db9961.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

463e378f-c6c2-4c6f-ad91-e5ec98aa3b78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\463e378f-c6c2-4c6f-ad91-e5ec98aa3b78.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aff92dcb-ca5d-4dbb-a04c-23aa7a5d7930.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aff92dcb-ca5d-4dbb-a04c-23aa7a5d7930.tmp
Size 38KB
SHA256 e241a44ba5e43477675f8998430d68ce7a9927de783c954022e1278e025863e6
MD5 7526475d000f8ec442a1c5d49e897390
SHA1 063cc0da408006fd9fea370dd4c02844f2f048a9
SHA512 b91b379aa45a2b442c6fb2ca2efaec22ff66c65f986dd83486ee43b392b1ff3787a5901d7d591913165dc636b5f5369859862d797009046cc1ac55a76f555da5
SSDEEP 768://UxvxjgC+y3M3OvwOn6+05fgGM1TnXMqOab3hIG:SZj3+y3M3g6fgt1TnxO83yG
TLSH
T15903C032AC555C335CF2E385B20AA297AEF54567D5C52DA889ED7E0E05C73AE430BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f824c4cf-a1c1-40a3-ab5c-c8e978956f3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f824c4cf-a1c1-40a3-ab5c-c8e978956f3d.tmp
Size 34KB
SHA256 ab0667bc2c8c1fcdb4d0b3d4f1b8ffc8899c35dd24dd6567d035bbeaa3eaa231
MD5 ed1a6dbd565c7022d947cdb7823327cc
SHA1 75fa16bc729835850dfaa5abc7d6cfb8b48204e5
SHA512 da85228ec449eb096c3d5b9e7bf9f8d4d0f1db86685df9890b49e8221d9434f449ee360a4baa9a929cbb0ca1eb6544c43a159d6ed3761658c82d309cf628bf83
SSDEEP 768:FG3N3WvwOn6+/5fgGM1TnXMqOab3oaTZcLHLTLw:FG3N3Yxfgt1TnxO839qrT0
TLSH
T1ABF2BF72A8659D735CF2D381B20A7286AEF18267C9C41E98D9DD7D1D01CB2AE534BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8ba1082-554e-4463-ad50-548c77bb09d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f8ba1082-554e-4463-ad50-548c77bb09d7.tmp
Size 37KB
SHA256 8d947d400ce106e02477ab0d474d6264468e7448ab3eb1eb10844cc4e8896beb
MD5 31ba3ec3e78dd8307b9bbb675a835bc4
SHA1 6a50cd77ccb35450580d7803caec53506280121a
SHA512 f3f47e6d639a95cf9e0e29f3e5aac4b9cddc43bcbcdb95889be95edd33b5782645c0a3112a94bf6c27080092a85c196c98a2f58de1b34ad760da37692af98f5f
SSDEEP 768:5/UxvxjgC+93lBwOnYu5fgGM1TnXMqOebeAaP8:sZj3+93Ucfgt1TnxOQeAG8
TLSH
T1F903BF36AC556D739CF2D381B20AA397AEF185A3D5C11EA889EC3D0E058735D530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download