d665135fa0b9f000b54549440a0f9db37f0b5f755ea1882f60126810d4fc6ab7

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 96KB
Sample261113-ansnsaev9j
SHA256 d665135fa0b9f000b54549440a0f9db37f0b5f755ea1882f60126810d4fc6ab7
MD5 6e448056c2614333019d2d90d1463907
SHA1 49dd0dc5fa0237482cb0ef9898305e472ce337e0
SHA512 89e87db12f6c9af5a6b3e8ce14bf7bd429d6081fdd37a4b7449f455a997847ace4823db8b6b18f7469033603b32451c1140214623285230425684b0fb0db1fa7
SSDEEP 3072:kwGuoI0AZ8xYJldWnXqYP/6x/cgsChClCc4+w1RBFsrNfT1K4cEFYVp1HZ:bld3c4+w1RBFsrNw4cEQ
TLSH
T16FA37561C28924BF4213A7D6E454FF2C34D7127DDB1F461231FC27AE2BE2C549A2A64E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
688	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{70B61718-7F4A-4158-992C-996A80178A86}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe
3084	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3084 wrote to memory of 1772	3084	msedge.exe	89
PID 3084 wrote to memory of 688	3084	msedge.exe	90
PID 3084 wrote to memory of 2964	3084	msedge.exe	91
PID 3084 wrote to memory of 2964	3084	msedge.exe	91
PID 3084 wrote to memory of 2964	3084	msedge.exe	91
PID 3084 wrote to memory of 5756	3084	msedge.exe	92
PID 3084 wrote to memory of 5756	3084	msedge.exe	92
PID 3084 wrote to memory of 4116	3084	msedge.exe	94
PID 3084 wrote to memory of 4116	3084	msedge.exe	94
PID 3084 wrote to memory of 4116	3084	msedge.exe	94
PID 3084 wrote to memory of 3032	3084	msedge.exe	95
PID 3084 wrote to memory of 3032	3084	msedge.exe	95
PID 3084 wrote to memory of 3032	3084	msedge.exe	95
PID 3084 wrote to memory of 3612	3084	msedge.exe	96
PID 3084 wrote to memory of 5560	3084	msedge.exe	97
PID 3084 wrote to memory of 3612	3084	msedge.exe	96
PID 3084 wrote to memory of 3612	3084	msedge.exe	96
PID 3084 wrote to memory of 5560	3084	msedge.exe	97
PID 3084 wrote to memory of 5560	3084	msedge.exe	97
PID 3084 wrote to memory of 1424	3084	msedge.exe	100
PID 3084 wrote to memory of 3068	3084	msedge.exe	99
PID 3084 wrote to memory of 1424	3084	msedge.exe	100
PID 3084 wrote to memory of 3068	3084	msedge.exe	99
PID 3084 wrote to memory of 1924	3084	msedge.exe	102
PID 3084 wrote to memory of 4444	3084	msedge.exe	106
PID 3084 wrote to memory of 1308	3084	msedge.exe	107
PID 3084 wrote to memory of 4616	3084	msedge.exe	108
PID 3084 wrote to memory of 808	3084	msedge.exe	109
PID 3084 wrote to memory of 808	3084	msedge.exe	109
PID 3084 wrote to memory of 2496	3084	msedge.exe	110
PID 3084 wrote to memory of 2496	3084	msedge.exe	110
PID 3084 wrote to memory of 4880	3084	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ff95fdcc188,0x7ff95fdcc194,0x7ff95fdcc1a0
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,8557440000164053866,10354588864601582135,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:11
  2⤵
  - System Time Discovery
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,13962387462716897072,5903773477750294220,262144 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,9401288078270654287,966991007288852118,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,6767834372209547079,14357082828952125538,2097152 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,974039974240072326,12126398980188694150,2097152 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,17027790568017371708,5605133933280792025,2097152 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,1951413055251212102,13637155299442938524,2097152 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:9
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,8855027934554920352,4978974540666496076,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,8944606906844716140,1771404228106332126,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,6697649603537026469,4701778247699915430,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,6697649603537026469,4701778247699915430,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,9345517381868781275,4191758891313866843,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,4508400889565123805,14836152710210966854,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,17268808186465189480,4512155148225771242,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,18284171720558843076,10385938807033694447,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,4733862176114366347,11558928158526986184,524288 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6724,i,6497287367798677548,6471518469036162138,262144 --field-trial-handle=2596,i,128692165427614470,5219037850702591364,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4880

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f54b6a9-cc3f-4ae6-9983-a9fe6ee0c70c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f54b6a9-cc3f-4ae6-9983-a9fe6ee0c70c.tmp
Size 34KB
SHA256 840c675bf2fb2ee6a20d86e60bed6847088803a088fe2ae1d33454353b6a93ea
MD5 35cbb0aea63e538758e6b5116aab7e20
SHA1 7b5a1d81e9bc36e903c712bfbb18397ed9d05af5
SHA512 8ba9f79d6d2caee8461fe4b14379e4eb82d033786ea8b4c69ba9b514b874dabed2da996166df0fe64ecaab1da97c13123920b70ccda74684ccd34a30ecc718a4
SSDEEP 768:5j83eGSO5pgYynMIYNa8S5oYklnA+0E75EBX+LF:l83rMhTWRdAvkyX+p
TLSH
T161F2AF35A8959DB38CF653C4E20A7783AEE49213D5981AE4D9DC5F5E01CB2AF2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ec12593-1292-4893-873c-0d69796b2723.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ec12593-1292-4893-873c-0d69796b2723.tmp
Size 39KB
SHA256 5361fa16d92870f956fedb2b80ac550a29c3686a669ed2e6af61a78feef481b8
MD5 f0356cb9043024cfbec9416768bcdd2c
SHA1 ac6ff65919119a25e97a91243c0d791bf42c7906
SHA512 093d0b9bbea14162f73f6b0c9a185ea3b4f02ccccf8533d9605e81bf1b13f8820aa9ccf6a76e73c9cce9c065aed7c5467c008be835113b9b138b5c85ffcb3e2a
SSDEEP 768:dO/UxvxjgC+Y39GSO5pgYynMIYNa8S5oYklnA+0L7:ZZj3+Y3gMhTWRdAvL7
TLSH
T1B803C03AA9A4AD738CF693C4B20B6787EEE54223D1851DF849EC1F0E05C73AE5307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84c5b99c-c6df-4f8c-9283-dc26331a4685.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\84c5b99c-c6df-4f8c-9283-dc26331a4685.tmp
Size 38KB
SHA256 c018af8bf1d11c6f62afbdacc52d254801d6f8f5261916c2187916d199f287ae
MD5 b9161b671322f80f193ea43817d9dec7
SHA1 cd254487bc8f356b09be7f828d9ea49aac8d8530
SHA512 28fdef1640f4a049e624d09d5c62db6c6090921e02f77477f5cf434870fee545b92cde16848549a571e916eebb9eb6fd31837b6d3a04b40b5bcb27eff2d008b0
SSDEEP 768:do/UxvxjgC+23VfISO5pgCJMIYNa8S5oYklnAa2SH8L4:nZj3+23FQTHTWRdAZS04
TLSH
T1B303C03AAD94A973CCF653C4B70AA747AEF55263D0C169F88AEC1F0E16C72AD5303452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 84d025c8484a1ba1eae075fe4fb60ee1013d5e3c0fe4757f9d23c77a5ecf4bff
MD5 40a03f8f45ceb83458e7ff6718e8114c
SHA1 3aee2deed85e7e1b8a1a9090347606288ce5f90c
SHA512 011f7c1ff606c9271e176c099ac19361c51f6a3eb7ee8dae4e0bead781595a3fa38a006247688a203ba11818d1de1b9066033932d5d22ba79d5a19f921cf6159
TLSH
T164D02B316CDD4D23C08CA27C0056004117617400FE10404011211048080824142823AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 72a43fbaed1cd4a89462ff759b5bb2f6f6d1a7a9c08002937c809c101fc685e4
MD5 b04c9bc22d86d65999036cf784bd7a42
SHA1 74f3b96e34181e491a9fd238877d82f72fce321d
SHA512 9bbf9224f5546df81a26e79932518e2c3bea2fc0e37127e4af1f02d1a5543680b5d9370365c28b8bb5427b3bb4f27eb12737d158490216ff77859483f95a6b00
TLSH
T189D02B316CED4C23C08CA27C0057004117517400EA1040401221504808082414281399
MD5 SHA1 SHA512 TLSH

Submit Download

086534ae-9d62-4298-9e68-ed233c725eb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\086534ae-9d62-4298-9e68-ed233c725eb2.tmp
Size 11KB
SHA256 20da756aad5d7833d7bff739c082e7308b3dd99f08b08c2a4c781849fa360bc9
MD5 030145363f1866ddf42af52188dfdaed
SHA1 f7c0aca6d37d309261aebbd7dfe97a643f8c16bf
SHA512 e84cc6e1de02684f9003ab6f8b0d6c5a75c436bf10498e9ead25aef2d8e7f173135acc7f735c8ce55d114a1375c46eefb89bc4f9aa26c013757bf6e72d3d16c4
SSDEEP 192:sxR9R0bNx/fcsWMry/hzoA8p4W/g6+WNIYutpRkGCIgD5J:sxR9Q3/fcsWMm/cb/5IOH
TLSH
T16632B829AE68A93B8CDBD21DBB557F53D2F91032A1911E48B6FCDA1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cb80434-d858-48ba-9c9e-181ed2c3fffe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0cb80434-d858-48ba-9c9e-181ed2c3fffe.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10e56952-9e19-47ae-8bdf-6699361151bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10e56952-9e19-47ae-8bdf-6699361151bb.tmp
Size 23KB
SHA256 edb712969f7c794a25a11039f69fa23c2fcbf0121f7c22e24797acba92bc75d7
MD5 e9f5206cb500be47fa79e5c1959bc9d2
SHA1 c1eb48c44339f2ca0ac3ddc7e6b5771458d1fb1f
SHA512 c3d75b532089d0437be8ae4dad27cb1369f75926217fd32dc425caa96852fa38ca22a08579c701877a0c4ac157dcef6d12f883ece17d0f7c49c46b4cf4f12e06
SSDEEP 384:/7fnhUVfCtg6UFfCwKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXb9kMR6Srocbr:/jnhUJWg6cfCw8F1+UoAYDCx9Tuqh0V4
TLSH
T165B2EA2F644CCB7E9FC01AADDC196F976D9802C796A88D4047FE994C03C77EA911A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5be5a1c8-9d1b-44e7-9502-e6222a7b1ae2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5be5a1c8-9d1b-44e7-9502-e6222a7b1ae2.tmp
Size 11KB
SHA256 4d078c34826ed303953c0343b4c1b28b3ce3b65d78fa08cd0f1af47d046d4609
MD5 0930ad846e84bee3f99a1e2c0215de59
SHA1 3584ce8b1569643ed9d76508cbc35808f10e290f
SHA512 aad38a777eeea838836393d0e8c4c70dbc0b763123bfeec7a81f17bb667a01b9c1d4d868edfe008e6c3083b119226a9919c961651b56b75f1173b918fe785394
SSDEEP 192:sxR9R0bNx/fcsWMhy/hzoA8p4W/g6+WNIYueZRkGCIgDnJ:sxR9Q3/fcsWMI/cb/5In9
TLSH
T19C32B729AE68A93B8CDBD21DFB55BF53D2F91032A1D11E48B6FC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 7550fc92ca9601ae035a406e4a4f6684ad0db28b376b92b255fa52adc471b285
MD5 a8b68bf3af21dc70ae01def88bee8947
SHA1 d46b3a4ed3bb619a4fd5afa27f6d1fa6f0dc333a
SHA512 eeb5309902cec551ef262544c4b0b39b8e0717d1321763eb7217f26071115450c948d715093a6fea4832a0e6bb2469046230c5e35a6dfddcedd1069948b51797
TLSH
T1EFE0268516E8E22EA308E84741AC431DC2812A5AA3C4798E1788C8CDF046280EEC6EA1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 4499b1b22f6b8ac225466e10ecaeb47723dde11cd42d844d7e048cd58af51e4c
MD5 96163ae666b4ce14139d6a4c8337238b
SHA1 beedb77d9d897ba2bf2fe1371878d826511f16fc
SHA512 98abc9288f44cd34684a2283522a63529875015dabba5681c64e2e3e38fe196e906976afe402e17127e34af08e3c539b618ef073a4968737c2c440b6bfcc1eaf
TLSH
T14241E7486B60819FF798F1F3B6D00E87F6B4CA8259CF1E1005B4C1BC5A0D3D641B6034
MD5 SHA1 SHA512 TLSH

Submit Download

1c7831eb-b2b4-4d7c-85bc-9a3d326ca147.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1c7831eb-b2b4-4d7c-85bc-9a3d326ca147.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2945961a-d3e1-4ed0-9498-cf269de02d08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2945961a-d3e1-4ed0-9498-cf269de02d08.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

66a3e795-541c-49cb-bf41-135cd8f12cc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66a3e795-541c-49cb-bf41-135cd8f12cc0.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e76090ca-af68-46c1-bf70-6b50a1b42ad0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e76090ca-af68-46c1-bf70-6b50a1b42ad0.tmp
Size 1KB
SHA256 6016d15066c259f69adc6f56f74504da97ddfe18d2c1403a57d77a3e5e686f0d
MD5 ad58db117e983156fc24de90d26f43f9
SHA1 2f9331ea7b3efbfdfbe88f444e663cfb4bf17a4d
SHA512 8df871bc3aae095682a04059fc3d257b1c5db92d1b5631fee4b7544a5b4f069a0e5e6e5d086e7137b2e18709120fd736b84e9aebb1b9d013c1830a3ea3316181
TLSH
T11341A2F783B4957E8A0196F0EA14AE1FDE1D0526432C786585E4AE2793F3471E04165F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cf46afa17ee9633cd182fe49592a78e23325a8d2409b3a2efafeafc816de394b
MD5 cb974e9413ebb0cc3ae837bc7af40b10
SHA1 4578a0dbb8bd3bc9717fb980f7f65d5eeb01f9c7
SHA512 fb75ccb234bbaae338f9d51a3b252112c6f1a3584bb4871850324841c2156f2c1afca257ada773c3b4f20238e6ae5a83480438a2184bd8f2c2ee3d319d42ddde
SSDEEP 48:KTs5IMCKK+Ma3lIFs+KqLy++WUu/Pu8fyFhIRKyMMadItKeAgHyBjXj4jrjnjr:KQXSKAce2hiKyM9d+KeA6/
TLSH
T15591516431B72205397D760CA4FBA65A464171633458EAAF3FEFC056CA26E0A0DFC4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aab398cf-56a8-43e7-a60c-a2b085324974.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aab398cf-56a8-43e7-a60c-a2b085324974.tmp
Size 10KB
SHA256 f1aae58903f096ec3cb76d24a468009c04f640369f716d2e9d2dea9d4b31c2ba
MD5 6f67f929563f40ed7b9c360762926fa3
SHA1 453620ea86a63bc7a1fa9a286c4827cc41cbd9e9
SHA512 a5f17e17ac751b0a95b1fa3a966143c8d53c3a354889abb38afe8944a7efbdb625dbd4921d23e8c99d71c2d532e6c6be864f8fd4b61d730275812bdb31060d7b
SSDEEP 192:sxRiR0bNx/fcsMMhy/hzoA8p4W/g6+WNIYueZRkGCIgIJ:sxRiQ3/fcsMMI/cb/5Ins
TLSH
T1BA32A715AE68A93B8CCBD21DBB55BF53D2F91132A1D11E48B6FCDA1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e5fc757-bc73-4a23-8a65-61bbf543889e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3e5fc757-bc73-4a23-8a65-61bbf543889e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5eae8a6-2d20-4d19-b4de-f6cf6e65a282.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5eae8a6-2d20-4d19-b4de-f6cf6e65a282.tmp
Size 34KB
SHA256 2b870a9f87f713fab61256169c9bcbf621059689971ce34797814e827f306777
MD5 f7d33eeeeeab48d1b63bdbc994e57bbe
SHA1 275fa05d1698765f8cbb2885b896819109f283d5
SHA512 22863cd16babdfeb95059e4b608a26a548fcf938787c0ea8673ac70fad51cc46ec735c5c513bb4bdf0dbb6eb91f9f50faffb382babb8459ae642590e802a2654
SSDEEP 768:F833GSO5pgYynMIYNa8S5oYklnA+0E75EBX+LF:F83iMhTWRdAvkyX+p
TLSH
T1D7F2AF35A8959DB38CF653C4F20A7783BEE49213D5981AE4D9DC5F5E01CB2AF2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a0b21df-1203-4522-babf-2b4e8f65cca7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8a0b21df-1203-4522-babf-2b4e8f65cca7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f2f690b2-d640-48a0-8c18-9181e4b762ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2f690b2-d640-48a0-8c18-9181e4b762ff.tmp
Size 36KB
SHA256 2c735abb943706bd3fcc57271ff4e7d3ff093c140e959704fc6ca56f7014b4ab
MD5 3dee07d12aa5f89d838c9e3a6701285b
SHA1 3c81df342c447ce4289dc44d24f458f860e94783
SHA512 7f570336fb2763da51783eeee5ad5cebc172ca28f09beaad6da12182636cbdcfa3aeb0021bb837a3cbe97e1bf4b7811b6d4faaa630cf900850a24f27eb388bb1
SSDEEP 768:zFdw3Kwg+GSO5pgYynMIYNa8S5oYklnA+0E75EBX+LF:Tw30whTWRdAvkyX+p
TLSH
T14403BF36A8C4DAB78CB64BC4F20A7743AFE14263D4985AE4D6DC5E4D01CB2EE2307865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f49fcf3e-7d02-4ab5-9ef3-59765fd7fb92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f49fcf3e-7d02-4ab5-9ef3-59765fd7fb92.tmp
Size 38KB
SHA256 bbe3506d949f789e4eeed86cb2231cf606d845b4265c9a5a8136a962bbe2db10
MD5 87d76c993d1b39d3e2cc1246fac01d6e
SHA1 d9bdb6dfa3ffbb90a628bbc3d3bde0cc7f0de7dd
SHA512 3b903f4d2500d53f3bcb9b881687bea96e35699c13f9a317e0d389f485277f0b652e92b8396a505f9432f56b6665b3602f6a9aa9999f2cff6085207e812eafa4
SSDEEP 768:d8/UxvxjgC+23XcSO5pgYyxMIYNa8S5oYklnAL0SH8L4:LZj3+230MPTWRdAwS04
TLSH
T16D03C03AA99498738CF653C4720BA387AEF55263D0C569F849EC2F4E16CB3AE5303456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download