a1e264b08fc94264499562c6f21bdad3c327498ec8752a2c4f9d93a1e15a14b2

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample261113-pg7lpabv4v
SHA256 a1e264b08fc94264499562c6f21bdad3c327498ec8752a2c4f9d93a1e15a14b2
MD5 74e8d4f91dabd407080fe73e340b24af
SHA1 16d4cce7fc95e5d0c724604037741e46921892bf
SHA512 fe8dbc56fc274c3b476d4056cd310b6eeb61db7b7f24465f4c967772bacf32f8c8f13f6fd3f1485c84961736e7408f0923e8676e5790e7b36cf04ff1148e1de0
TLSH
T1C5419562C2851015B6B7C193E7E0879B34804D43C2B78BE67A8BF1F1CACA5A6557332C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5764	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{CCD04D50-DF79-48A6-A6A8-2E84FBE82406}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4256 wrote to memory of 5796	4256	msedge.exe	88
PID 4256 wrote to memory of 5764	4256	msedge.exe	90
PID 4256 wrote to memory of 5476	4256	msedge.exe	91
PID 4256 wrote to memory of 5476	4256	msedge.exe	91
PID 4256 wrote to memory of 2404	4256	msedge.exe	92
PID 4256 wrote to memory of 5476	4256	msedge.exe	91
PID 4256 wrote to memory of 2404	4256	msedge.exe	92
PID 4256 wrote to memory of 4780	4256	msedge.exe	93
PID 4256 wrote to memory of 4780	4256	msedge.exe	93
PID 4256 wrote to memory of 4780	4256	msedge.exe	93
PID 4256 wrote to memory of 5268	4256	msedge.exe	94
PID 4256 wrote to memory of 5268	4256	msedge.exe	94
PID 4256 wrote to memory of 5268	4256	msedge.exe	94
PID 4256 wrote to memory of 3556	4256	msedge.exe	95
PID 4256 wrote to memory of 3556	4256	msedge.exe	95
PID 4256 wrote to memory of 3556	4256	msedge.exe	95
PID 4256 wrote to memory of 1696	4256	msedge.exe	96
PID 4256 wrote to memory of 1696	4256	msedge.exe	96
PID 4256 wrote to memory of 1696	4256	msedge.exe	96
PID 4256 wrote to memory of 2212	4256	msedge.exe	99
PID 4256 wrote to memory of 4472	4256	msedge.exe	100
PID 4256 wrote to memory of 2212	4256	msedge.exe	99
PID 4256 wrote to memory of 4472	4256	msedge.exe	100
PID 4256 wrote to memory of 3940	4256	msedge.exe	102
PID 4256 wrote to memory of 2924	4256	msedge.exe	106
PID 4256 wrote to memory of 5748	4256	msedge.exe	107
PID 4256 wrote to memory of 4328	4256	msedge.exe	108
PID 4256 wrote to memory of 4604	4256	msedge.exe	109
PID 4256 wrote to memory of 4604	4256	msedge.exe	109
PID 4256 wrote to memory of 3496	4256	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffb48c3c188,0x7ffb48c3c194,0x7ffb48c3c1a0
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,6669098396145319434,8746907477524444915,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1936,i,9661989689061664436,9907823127193622019,262144 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,6737794537528833619,14689864021664092825,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:13
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,16837940332459560445,13859677398332906237,2097152 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,4617460786553888316,5931998720313726785,2097152 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,18080230873414668565,5929176144173512340,2097152 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,8848021092704914683,13678802516188392846,2097152 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:9
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,5056626929683165705,5389932670571731939,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,685149834596690795,1097384700096535435,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,10376994064488803903,2343263274737804325,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,10376994064488803903,2343263274737804325,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1360,i,7813210658480044774,12757607629561862113,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=1228 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1368,i,12540698400386723,18092446155322511327,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1376,i,14713573554086251994,9852476011330193300,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,3160855712946258528,5296488975919570655,524288 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1404,i,14744971122763460224,15880300072709764795,262144 --field-trial-handle=2676,i,991500297004239292,9565436194054219721,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

06529b83-363d-4178-9685-d3f434e8bfce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06529b83-363d-4178-9685-d3f434e8bfce.tmp
Size 33KB
SHA256 053828d7c2f4d08d78a9b410e045d844f71c092f57304268acd741b50303c1aa
MD5 95ddc4a89031ac202adbcf6d28f8970b
SHA1 9b783eeae481826e96e27181017cf30d5616d692
SHA512 5626b5e87b9ca0c7102c027165998123b99bd3efa9c0dcf46154ac9334487476a2e44555bb1c1c881e7d6cdf396688245cbffbed1915f60ddab6f5dbd829f55f
SSDEEP 768:HQ34H8Pc7fZrKTkp5XSwQs88uBkiT27E75EEULE:HQ3i3tr+KILNB2kTUA
TLSH
T111F2B039E8949C779CB39381765A3B436FF0910BC8C80B54C9DEA61D028B75E778B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39e5f7d1-cba8-4803-b691-6d0c62533f56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39e5f7d1-cba8-4803-b691-6d0c62533f56.tmp
Size 38KB
SHA256 977ad85a29c2729e05568834fcca71b16e5bb229eef0226d724c33f64a15bf7c
MD5 24567d1380c81cedc0cc7e849b27f916
SHA1 54d3954ed2e390c5813750660f9f6eb62e04b8d5
SHA512 c7b953808902700e80e95cd59a6f30ce9f95de0d066452712ac16b9c165bb202b6e0796a43edf753e226ef3d9fc45f7eb504024b94fbeb5c851d8f975ae74c58
SSDEEP 768:K/UxvxjgC+83IHSPc7fZrKTkp5XSwQs88uBkiT27wR1k:PZj3+83Sdtr+KILNB2Gk
TLSH
T15F03C03AA8946C63ECF39391775B3747AFF05117C4C409A88AEE6A1E038B35D634B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8060aaf5-0ecc-4965-b9f6-a7c4b0335f09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8060aaf5-0ecc-4965-b9f6-a7c4b0335f09.tmp
Size 37KB
SHA256 849cf90738a48fb469b1d529d71e33252a66fcc758a94660eb7a68a9fe73288e
MD5 3db4dd7eaf0e4d1723fa23368c3216c4
SHA1 f79ea28ee0193bb83a3376a9f6476d04bd1ebb7d
SHA512 a5ada7645332ca126c441cae9ea914159a7ca876add310fb03b4d431b4f6c7f1bab05fe9a6427bc6d6c7b15ec03adf5b3b6b178189d07e230a29a703a11be795
SSDEEP 768:R/UxvxjgC+W3cF/c7fZrKTRp5XSwQs88uBkiTC9/P84g:kZj3+W3citr+/ILNBcHg
TLSH
T1F403D039F8946863ECF39385365A274BAFF06153C4C41BA849EE7A0E028B35D6707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a777729-1347-4bf6-9ebe-3aaf0b5e960e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a777729-1347-4bf6-9ebe-3aaf0b5e960e.tmp
Size 36KB
SHA256 1c8f189cc9ba016e0bc53162315d5ee5cc190bd4ae9324c51bbf01480d4e2674
MD5 7fac67cf173533a45ff6f9fb2dc3b921
SHA1 40f9f93239508f66331a080332ec1aa6985464fd
SHA512 99de9fdf52bce4f66319122a900acba02f3323051db96ea8562f1b05b05018a51e75992bce0677de5036353f5d9ac08a5079afc9ac5677b5aef0ef8420ba9237
SSDEEP 768:kFdB3qwg4H8Pc7fZrKTSwp5XSwQs88uBkiT27E75EEULE:IB3X3tr+SOILNB2kTUA
TLSH
T17CF2BF36E8C4C977EDB287C1B75A3703AFF09157C8C40694D6DEA91D028B29D638BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a7b6f22-ac31-424f-8a94-099c538b648e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a7b6f22-ac31-424f-8a94-099c538b648e.tmp
Size 38KB
SHA256 f048637b9e0015f19fe012deb994175270f05bc3c93e7b8359939ca0e5f35575
MD5 2b1778624352584feed71a56db14ae1c
SHA1 0b841ec4b9b13b74984daa03c20b0475868db629
SHA512 d38aa6702e18f485eaee7023446e0d4ceff836cfe22e2622815ed9213da8fe5615ad348950d74a55d6616a8de1fa333a1b2591e99f1cb84ca86c08539387f1a7
SSDEEP 768:n/UxvxjgC+W3quNc7fZrKTbp5XSwQs88uBkiTz7/P84g:aZj3+W3qvtr+lILNBpHg
TLSH
T1C003C03AE8945863ECF39381365B274BAFF05157C4C41AA449EE7E0E038B35DA30B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

852ab53c-89f7-449a-803f-51d0be0b6779.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\852ab53c-89f7-449a-803f-51d0be0b6779.tmp
Size 105KB
SHA256 f177a9ca2ff22dbc463fdac60c9dddb266a340db1e1d3fae8f0d915baa7c0b70
MD5 3e0bcbe3e53357294b3c897458db4b90
SHA1 0d306ace9c82f16f6fa4f75eb52ad1c738a013ce
SHA512 488de48186b8b77ac8d4750db93a2b93bf0dfeea523717d10c7e0eef9902eb9ee2db3f0bd5edde32a4e252219ee3d7290532c43a320be0f9bd6d4bb0aca81964
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T17CB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

269573b7-cd13-40c3-8ff1-4a6f19db7091.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\269573b7-cd13-40c3-8ff1-4a6f19db7091.tmp
Size 11KB
SHA256 8429c24192bfa19ce233a0fd068bc3021f49f45e1a45d2017e3c80799f0ed6c1
MD5 ebfb262cdb91948271696f33c87d3e33
SHA1 1a22667102acf8c3ffc939e2ca44bcf42883665a
SHA512 3de40b7de82ba31b553e8c26e716eb4082a3bd408b273bfcbab11e9a92c1183b110cb6f3aa1b81b79c538da77c5ddaf10696faca1ef2ad1b52a4fa276f13a5f9
SSDEEP 192:sxRgRhba/fUsa7HReozoA8p4Q/g6+WNIYEGg+GKIgIJ:sxRgPa/fUsSAh/5IYs
TLSH
T1C432B816AD28A93B8CCBD21DBA557F53D7F91032A0D11E48F6FC8A1C15EA6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

274e2207-2aa7-464c-9e0c-cd6de1485db3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\274e2207-2aa7-464c-9e0c-cd6de1485db3.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

42e374b6-9808-47f3-8f40-2ac04afb2aa7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42e374b6-9808-47f3-8f40-2ac04afb2aa7.tmp
Size 11KB
SHA256 61aa2aa0300b2522ae30d495329c13251e729c13848dec6d6716e38044a12477
MD5 4cce17c862038a667da85614c6871f2c
SHA1 50560ec5f6af40ed8a0b03eacb16d8f0b462ea23
SHA512 0b9b3d3e7364dce1396e8855b35eba651a912d96af2387250473488d05626674202eb3dc1af4210c7420d5c1ff541c9cc72da1c1b3dac7e7fda21e515f7aabcc
SSDEEP 192:sxRvRhba/fUsm7HReozoA8p4Q/g6+WNIYEGg+GKIgDuCJ:sxRvPa/fUsGAh/5IY6e
TLSH
T18D32B716AE24A93B4CCBD21DBB557F53D7F95032A0911E48F6FC8A1C05EA6DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67dbbd8c-6a91-44bb-a0c1-262836c74575.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\67dbbd8c-6a91-44bb-a0c1-262836c74575.tmp
Size 11KB
SHA256 b0cc6ef7899dd6c05bbe1985cf13f99bc348ed3e4947ccbc8820920b80dc2cf9
MD5 031731f0c1a994560b16196d705bf234
SHA1 fe6e5c10cdc53298ceff53583ff48cb896e14cfa
SHA512 26d083af2f612bd62610abc2807f52b22713186a714338ef9db008fa5ee2378159f340d1d82046cade04668f3759f3866b26a85e2a7b7950eb74d70ec3ec7c01
SSDEEP 192:sxRvRhba/fUsu7HReozoA8p4Q/g6+WNIYEjo+GKIgDu4J:sxRvPa/fUsOAh/5Ir6c
TLSH
T18942C71AAD24A93B8CCBD21DBB557F53D7F95032A0811E08F6FC8A1C15EB6CD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7883b286-77fc-4e33-866f-83ecff0ee001.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7883b286-77fc-4e33-866f-83ecff0ee001.tmp
Size 23KB
SHA256 4ab5713eed43dd7881584e1d3360701c8e0d907faf3603f9d239c201c96d0909
MD5 3be50a28a40b15eee178d21dd120f1df
SHA1 1ade7c3822db188cc4dc4181e38b657a607694e6
SHA512 b5b827e6748c078dca2b85a019d6f09193b23bbf5adf3070c04c1758659f297478caf3b853b5d281f0226e4701d5f33340c35a9f49be342ddb848a735013d475
SSDEEP 384:USupCD0fCtg82FfrLKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVQc9hnRXQroJet:U/pCDmWg8KfrL8F1+UoAYDCx9Tuqh0VV
TLSH
T1B4B2D92B640CCB7F4FC04A9EA8196FD77D9802CB9A588D4047FE995C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 9fa72b311f2e46ac05e14b13d0f8595a53a1fe0e8e27d5f70e2f09c782275671
MD5 1d61f7d69548cb191e4c7d8a92e08582
SHA1 ba7fdce353ca2ef99fbe8fdb18f3f18188dc5c82
SHA512 b4bcaf52222fdbb38274144c41679a73bd8c3f6ef7990bf0ddac2e6bcbe54fe5dc938e9c174d867e8f6a930d006d99ed38c25c6de192817d3871c7572d8c522d
TLSH
T1333151CAD598042AF3944971C7D8DFDB36B374BBA1834D8303A4CABEA3A6398404087C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 c3975fb0b2677eb1a050981ff3b30c8f6ffe3dcac26513642a7c4b2b29f26dd0
MD5 41bc1313f47d01870568c175f061cd82
SHA1 94a331b1f0ff9a8a2e4e586283dbb544619370ed
SHA512 4fdb13684337d575e208ad1bd63d8d754e3b04d492ec113b16f2188a047566d96696ac8e547ff08fdddef399b18d447e493a40419462e543b5233542748fd5f9
TLSH
T17A3151CAD594042AF7944971CBE8DF8B36B374BBA0834D8303A4C6BEA3A6398404087C
MD5 SHA1 SHA512 TLSH

Submit Download

0d5b1e85-5279-4607-af7c-2023fcf2ea55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0d5b1e85-5279-4607-af7c-2023fcf2ea55.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5d282583-12a0-4e14-9e05-759335320ce3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5d282583-12a0-4e14-9e05-759335320ce3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

dc7f7149-b7da-4e37-bdd2-6df75f63a469.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dc7f7149-b7da-4e37-bdd2-6df75f63a469.tmp
Size 1KB
SHA256 a7574749856bb1aeef6c2ba4fed39447f6c73054656cf0cc52042549ce84e6a2
MD5 3c965d2170a4e9a9e02fb07179ebad93
SHA1 96af7f8d309aaee2d74ef18d8eadd05d1e706af1
SHA512 d7a91ec6cb4d78d560bf27aa626ea78e4163411d5e0e6fdee9539666aa35b688ce3d9c3242994786f32aa29c826dac7600cad733d966a80be737176a7934dac5
TLSH
T16B31E2F783B4857EDE0186F0AA146E2FCE2D0511432C7CA985E4AE2B93F3471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 25ecbf6b6893fa8422d6c02f7583126087777de4ae485e1fd53cd56ce3ac218a
MD5 1423424b7d7d3e9e218e017314e46a2b
SHA1 620586321a52151d9495c576578f8c41cd96185b
SHA512 3527e0fa1dc331164ba69f631fa4093f81cce8082aabed286b851297503ddcac47f3fae6b31f9a394b0ba437e58f892c66baa9e3a38ed5b9273e24d5659f2193
SSDEEP 48:KYbIVKYkYfy1FIlKWIIC0InKhukLylJI9KawgP:KYbGKYkKGFWKWIl0gKhu6eJKKaw6
TLSH
T1F3B1D14130BE124038BE650E80B4872A558132F3715AEA3B7F7D51E64A6BE186EBDCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ac4439a5-05fc-499d-a67b-ef68a7aed352.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac4439a5-05fc-499d-a67b-ef68a7aed352.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

f3d8f246-d927-4113-8fc0-dd9bc3cb9059.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f3d8f246-d927-4113-8fc0-dd9bc3cb9059.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9628f56-cca1-4ce7-aaeb-9e94b586f673.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b9628f56-cca1-4ce7-aaeb-9e94b586f673.tmp
Size 33KB
SHA256 999de5f8a444d6898bef262441aa98d5c4556d718fdd3ee8e327eddefe6a0e7b
MD5 1dcc7f7b710fe38bc2ac9ca9c9d82313
SHA1 9a7b1ae089023b2b4d1b6a041e97f67fb0065dd2
SHA512 74d3daf6b916d1bbc60da3bb9d74fff24d73a67bde97e7a5964f6d867b58af7f955bd6198fd566aa07de71584f0a18243053cc141c204cd01b428a1f457d467b
SSDEEP 768:sQ3pH8Pc7fZrKTkp5XSwQs88uBkiT27E75EEULE:sQ3R3tr+KILNB2kTUA
TLSH
T15FF2B039E8949C779CB29381765A3B437FF0910BC8C80B54C9DEA61D028B75E774B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f16af824-ded8-4925-ae49-2e9ff0491826.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f16af824-ded8-4925-ae49-2e9ff0491826.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download