a1e264b08fc94264499562c6f21bdad3c327498ec8752a2c4f9d93a1e15a14b2

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample261113-pg7lpabv4v
SHA256 a1e264b08fc94264499562c6f21bdad3c327498ec8752a2c4f9d93a1e15a14b2
MD5 74e8d4f91dabd407080fe73e340b24af
SHA1 16d4cce7fc95e5d0c724604037741e46921892bf
SHA512 fe8dbc56fc274c3b476d4056cd310b6eeb61db7b7f24465f4c967772bacf32f8c8f13f6fd3f1485c84961736e7408f0923e8676e5790e7b36cf04ff1148e1de0
TLSH
T1C5419562C2851015B6B7C193E7E0879B34804D43C2B78BE67A8BF1F1CACA5A6557332C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1880	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{5F725B53-A506-44FB-B1B2-ED7B71EA8037}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4236 wrote to memory of 1100	4236	msedge.exe	84
PID 4236 wrote to memory of 4760	4236	msedge.exe	85
PID 4236 wrote to memory of 1880	4236	msedge.exe	86
PID 4236 wrote to memory of 4760	4236	msedge.exe	85
PID 4236 wrote to memory of 4760	4236	msedge.exe	85
PID 4236 wrote to memory of 4764	4236	msedge.exe	87
PID 4236 wrote to memory of 4764	4236	msedge.exe	87
PID 4236 wrote to memory of 2592	4236	msedge.exe	88
PID 4236 wrote to memory of 2592	4236	msedge.exe	88
PID 4236 wrote to memory of 2592	4236	msedge.exe	88
PID 4236 wrote to memory of 3784	4236	msedge.exe	89
PID 4236 wrote to memory of 3784	4236	msedge.exe	89
PID 4236 wrote to memory of 3784	4236	msedge.exe	89
PID 4236 wrote to memory of 3424	4236	msedge.exe	91
PID 4236 wrote to memory of 3424	4236	msedge.exe	91
PID 4236 wrote to memory of 3424	4236	msedge.exe	91
PID 4236 wrote to memory of 2876	4236	msedge.exe	92
PID 4236 wrote to memory of 2876	4236	msedge.exe	92
PID 4236 wrote to memory of 2876	4236	msedge.exe	92
PID 4236 wrote to memory of 1060	4236	msedge.exe	96
PID 4236 wrote to memory of 2176	4236	msedge.exe	97
PID 4236 wrote to memory of 1060	4236	msedge.exe	96
PID 4236 wrote to memory of 2176	4236	msedge.exe	97
PID 4236 wrote to memory of 4200	4236	msedge.exe	100
PID 4236 wrote to memory of 4952	4236	msedge.exe	109
PID 4236 wrote to memory of 2236	4236	msedge.exe	110
PID 4236 wrote to memory of 3892	4236	msedge.exe	111
PID 4236 wrote to memory of 2744	4236	msedge.exe	112
PID 4236 wrote to memory of 2744	4236	msedge.exe	112
PID 4236 wrote to memory of 2596	4236	msedge.exe	114
PID 4236 wrote to memory of 2596	4236	msedge.exe	114
PID 4236 wrote to memory of 3696	4236	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffad580c188,0x7ffad580c194,0x7ffad580c1a0
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,14392730682604219120,13841510506264711307,262144 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,4878093452281569065,12994319625144330049,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,15789034487704071125,14140229862014987593,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,15498559263018292312,969772670296330936,2097152 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,1061836683107910168,352212473079592283,2097152 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,15412522190485543378,7619067727486129374,2097152 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,14685999117722946675,10779239112123195197,2097152 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,10153218488248814410,11763782100386884237,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,2398186306963679827,4182854738167067105,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,8350621784930954906,6567840138042714420,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,8350621784930954906,6567840138042714420,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,15317168371487558715,7016787337852667428,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,5628275506780074026,11741040943492278009,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,14268013347121303973,8241258196876211001,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,10570292479333571538,12178265910650269633,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,8594712578752091679,3038585751702899865,524288 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4460,i,15619466558947389396,3471565082232232463,262144 --field-trial-handle=2300,i,3841003881449851121,4942170153210261863,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2665b9a3-cb81-41ce-b7a9-cb9349ed21d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2665b9a3-cb81-41ce-b7a9-cb9349ed21d6.tmp
Size 8KB
SHA256 61c4e224ff7519440925eb02516f61fbdc6dd9195766a6520782f5afd2a07ded
MD5 99e25be8f5317c3c192b5fd1aed13972
SHA1 79e89a4a3dbfed848f0eab57894e491db99ee1fe
SHA512 9ce538c0e535dbbde4c9ce30bb3fc7679e0ef6e75aaade5b57ae299aabb6bc2b6314cc5c0a78a68d8a28027af76209fb81659e37ce91d5089d90fc271db2bbaf
SSDEEP 192:8ONf6IEhQmiUy7XTzuIGmz7EmxYBeUd27HqqpU6:8ONf6D/IzuIGmz73Y8HBU6
TLSH
T1C8121936D878BC2B9EA3E844F48739236EA59227DAC97F80D5DC2A1C01DF25C130B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9554e5a2-fb69-4020-acbb-364b4ada96c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9554e5a2-fb69-4020-acbb-364b4ada96c6.tmp
Size 18KB
SHA256 cf627a416de3a4e668da522caded14242600631488bf3bcc92483806bb90600a
MD5 57728db828fef92fc3470b5eb5756d1e
SHA1 e6f7a0540fdaad3340d7241e6c77290a9a7ef1d4
SHA512 a74ab5698bf5867e1f72ef898771899f396adf9bd6e5c3d19ee9bb95836eab49e60e8d6c87e310c02f67fbebe576763c0f2449d105a54f3c1a7b1e00e2981a66
SSDEEP 384:aQkUSv0sN+aLTFc1hFBzIGmz73YviBH7vBE6t5IIl7:C0ZxNgjkiBH75Ec5L1
TLSH
T1A0826B36D8786C3B4EB3A544F18A3E13AEB49217D6C91F90D9DDAB1D01CB28C134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

966216fa-818f-43b7-9bf8-aaa3d1c35f6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\966216fa-818f-43b7-9bf8-aaa3d1c35f6a.tmp
Size 21KB
SHA256 732aad982ca3709b5555e60274fd78097846eb3152cd96ec961138bbdf954fb9
MD5 9efb40191233733bbb8ac4179b190a9a
SHA1 1d2bde0a30f455a8a87aa98e55e19d4378e763dc
SHA512 a43451b9849f157173304adc1d760259f7a8a52ca01d2ceaa2d52a2ed63346a0d394c296d759e8b54f905066cac3097d05b6f25de3512c8443405e7c4db1224f
SSDEEP 384:EiFzQkUSv5zsNO8TUNTUlIlaLTFc1hFBzIGmz73YPEiBH7vBE6t5IIl7:fFd5XwghxNgjyEiBH75Ec5L1
TLSH
T101A26D37C8A8AC3F9EF39A84F54A3A139EB59157C9C96B90E6CC9A1C01DB1CC134BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

4264745c-0a48-4ea9-82d5-1a5e4268cb7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4264745c-0a48-4ea9-82d5-1a5e4268cb7f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

430f1090-4d5d-4578-abb8-af2ad0ee1b36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\430f1090-4d5d-4578-abb8-af2ad0ee1b36.tmp
Size 10KB
SHA256 785cf360c1dd26062b8ddc060c87d8ad9c148f693b83f801e73725a9894d7083
MD5 cd54528dff52a1aa337d1a7a1648285f
SHA1 5d1b686fa2ba2b6e31716f5c53be5eb0b24bd870
SHA512 b1b5638dc0a8e530f22d9eac0766a1000008599aa3a3c0a681f008e1c2f072de599b752555badb9e2242fce7c5fc53b0deb9a61764d37df6058d128c6bbb9297
SSDEEP 192:sxZ18RYWn/f0sjVrIdpd7HW6+WNGYapBuMnDIg5qJ:sxZahn/f0sj2dHbGCCY
TLSH
T17022C8166E28697B8CC7E25DBB55BF13E6F9503290D11E48B6FCCA1C05EB6CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4574a8d9-b8bd-4fe8-b300-5ed09ab9f7aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4574a8d9-b8bd-4fe8-b300-5ed09ab9f7aa.tmp
Size 27KB
SHA256 cf14bdd84c07a2162d24264fe9bbd48f726171077c9c02ed0f06edbae23f50bc
MD5 44da7f190ae837b27b25b49ef100be27
SHA1 088543311d578889fef57d40c925995a30d635e3
SHA512 18daf2a4b796b3effa9cd085fa957770da228fa8d3a15ad871f1355e065e8ec919a185687be1e908a70eb6a74dbf07166be6d74559b3dee95dfefc55b1916814
SSDEEP 768:SOWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7lro4cfetmRO:SOWPcLKWvKeEeu1jaClLiF7e4cWtmRO
TLSH
T1CCC2EA3F644CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a3a7c63-7803-442d-995d-b6d8fd19fadb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a3a7c63-7803-442d-995d-b6d8fd19fadb.tmp
Size 10KB
SHA256 980588f61af927257c764a6c9bfc64f1e1451af9f4904d49655bbd8c5d402837
MD5 49ef5886c9f5e442e7c7dbbc62c62472
SHA1 61191d7ec481ecbbfd903a73b2d10468933b8f3a
SHA512 b09c197604bc9b8b8900a6bf21b35989d616b0f66fb825a6c0685de35b0aef4b7b6ca52f15d599a4b480c5401ab42c42cbdaf503703cbfd062f7d138f76e7ea7
SSDEEP 192:sxZ18RYWn/f0sjVrIdpH7HW6+WNGYapRu/nDIg5qJ:sxZahn/f0sj2bHbGajY
TLSH
T10722C8166E28697B8CC7E25DBB55BF13E6F9503290D11E48B6FCCA1C05EB6CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 acc3b83b68030f6f791ec838f17fc6bd4f5e5172b7c26d23660e8c4c32fb9752
MD5 e34cd897af8fdbcfef1a79890e2c77f4
SHA1 11cf28e673a22596f762f223f30e431e8671e937
SHA512 9093ee4cc6b1e06dad75354f16b4aae4eb0a5966a52fb462e41e524111ada53d0ff5c95809a65cabf4b87b7ab81c611bd440290488e6e92c5fafbf0e1f22292b
TLSH
T10461505189C143BFF74CBC75A5E631BB36F69984C883AE6154B7CC798A0E7521A3170C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 63e79f51f6f4feefc8b8f85e225a84972b17097076b44139142aeffe0362bd9e
MD5 ea9a3e95ffc06a5d5495733ff7c96d8e
SHA1 6f4f8a370d57591a7df298f25b91e7889884d9b6
SHA512 9e3ba09a5e993130c8035fd298e9a3e772a0dc3f882bdcc5a59b7ebd13a509ecf6fa1bbb46697136417ba92c4dd9e5f226d85abc707fcd792e6cef231f9ed9ad
TLSH
T18E615E5189C143BFF74CBC71A5E630BB36F69A84C883AE6254B7CC798A4E7521A3170C
MD5 SHA1 SHA512 TLSH

Submit Download

d5adc0ee-cc52-4b10-9ee4-38a0d1812c49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d5adc0ee-cc52-4b10-9ee4-38a0d1812c49.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

14c0e098-eb82-40eb-b989-ca27f81c2ba0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\14c0e098-eb82-40eb-b989-ca27f81c2ba0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

497379bf-c043-40a5-922a-49ec731b8d81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\497379bf-c043-40a5-922a-49ec731b8d81.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

4c79156e-ddba-42cc-8781-3046a9cf51be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4c79156e-ddba-42cc-8781-3046a9cf51be.tmp
Size 949B
SHA256 4a423887b3d6be8749f9ee34e2841aa267bb5dd77a5a9fbea7a64f2898114d67
MD5 b5b17edfc4409b355d237dce4af14259
SHA1 3658e8b2750ed51d4b46eb3eca1f1f91ef9ec588
SHA512 0394ab0799f09bf03c1f12a3556528240cbd4ff65e743fe37c5b38f8166d2b93a4e84ce1f3a3319512def77754c1ac9b3463e90745eb0a37ac7ea0e21bc1438d
TLSH
T152117DF7C3D595AEC9015AF06A24AE2BDE1D0506532C7C1AD5D4EF2B93E3075E00155F
MD5 SHA1 SHA512 TLSH

Submit Download

ec69de1c-6078-45ac-bd73-db06113bf99f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec69de1c-6078-45ac-bd73-db06113bf99f.tmp
Size 9KB
SHA256 8e4a395007321047b7fed9c1aacb429cfad56500c8e25e0d412efb702d154f24
MD5 7bc806c19d5f9258a6778370b444300e
SHA1 1f814bee387569f79cf4ec482afc9d6ec2d732bc
SHA512 598c2cdaead91390af40c2838692587df95491e35f799ac4c718a3efbeffd31fc0a80b8fcb12977966263df29c9fc22195d29c4e0a78fe1f349b94c9b5e27628
SSDEEP 192:sxZ18RYWn/f0sBVrIdpd7HW6+WNGYaplucnDIg5IJ:sxZahn/f0sB2dHbGqyK
TLSH
T12122B7166E28A57B8CC7D21DBB55BF13E6F9103291D11E48F6FC861C05EA6CD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f47d36a2-44db-475b-bee7-0e6170c0ae61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f47d36a2-44db-475b-bee7-0e6170c0ae61.tmp
Size 9KB
SHA256 1b03eb018686c85e16da4195480a8f971b5b930ce36dea799b3d7fada193c860
MD5 b544f679e31ac6806c7585d39e22a296
SHA1 725f11da74e04ab390d390482fa4e8b25f502030
SHA512 ebb74efe3cf7fb91d0685c935d3be1f14b40dcdd0f275c575974aabb92c946ba2eabda3a67640880e5ea8b731eb58e8afed7525917f5d0b9608ed0e91bbcf090
SSDEEP 192:sxZ18RYWn/f0suVrIdpd7HW6+WNGYaplucnDIgrJ:sxZahn/f0su2dHbGqy9
TLSH
T1C622A7166E28A53B8CC7E21DBB55BF13E6F9203291911E48F6FCC61C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d3f181e-e4f8-4630-a5e2-c1aecfb6e1ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3d3f181e-e4f8-4630-a5e2-c1aecfb6e1ea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a14c2860-04a3-484c-9d82-e2a03098b889.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a14c2860-04a3-484c-9d82-e2a03098b889.tmp
Size 8KB
SHA256 7ee8ddd417704eeb958fe03e6d793c5ba9de57939de3da6681f63b704dc49f71
MD5 06985422b71b7a3a0f4c4363142a4856
SHA1 780299407b9b9a783735a3bafae1af4362916cc2
SHA512 f054a74c40b5877fbf2948b0137150a6e9f8f5855e4585a062336f5792ef64e703e3a1ccdfe7b8988c03125bfc430831d608888be695987b6ee80a4fa1bd603d
SSDEEP 192:aON+6IE7QmiUyCXTPuIGmz7EmuC7sXWuU6:aON+6DtfPuIGmz7ZstU6
TLSH
T12502E739EC7C7C7B9FF3AD49F4872A236EA5112BE6952F84D9E41A0D00D725C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30e77534-ba2b-4e2e-b551-defbbf6e6996.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\30e77534-ba2b-4e2e-b551-defbbf6e6996.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f55af785-48b0-414d-bf39-ef7399eeea73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f55af785-48b0-414d-bf39-ef7399eeea73.tmp
Size 18KB
SHA256 eea068f055b98b01851b314b02a539a3a885271733c397bb2f2aa06457916cb2
MD5 d3f21d0b8ce7f2e5e7e3ed572acd090a
SHA1 6ec04edcdae35d69a87c9a7bb35755c24d3086e7
SHA512 3eadf5aa9f000ceb52a71b6bfcc8bb34e1ddb0c9a012465bc53b3a9ff3052baff0e096f2b942ff9b930311859be03839deb8b6565c168303db97ecda58ad34b6
SSDEEP 384:SQkUSv0sN+RLTFc1hFBzIGmz73YviBH7vBE6t5IIl7:K0+xNgjkiBH75Ec5L1
TLSH
T157826B36D8786C3B4EB3A544F18A3E13AEB49217D6C91F90D8DDAB1D01CB28C134B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 84829f033573ca9a99bf2923c9c2a6daca61a4b625cf1b48673f94412e1ed367
MD5 372cd18b48cf22f72213fc9dca30a68d
SHA1 4bcb21649ec63e105c454d8a9b65bc1218928ec8
SHA512 40392a1b814b5d8b8a10344935dc9f942d8c2257ebc280576d1b33ce0c74ca8779ed776407a22ab4bb1f0124799fda1be169433f6a46ea6facf36b3e665f3813
TLSH
T13141D958B6E91108B3B77F5A9BF6686E483B7C772E07D55E10110E4E0A62B40CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download