ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-45059-2ze73v.html
Size 116B
Sample261001-2dbfasca54
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1876	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{C7795F64-04BE-4C7A-AAF0-1B7BFEC61696}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4024	msedge.exe
4024	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1792 wrote to memory of 2568	1792	msedge.exe	87
PID 1792 wrote to memory of 1876	1792	msedge.exe	88
PID 1792 wrote to memory of 4284	1792	msedge.exe	89
PID 1792 wrote to memory of 4284	1792	msedge.exe	89
PID 1792 wrote to memory of 4284	1792	msedge.exe	89
PID 1792 wrote to memory of 712	1792	msedge.exe	90
PID 1792 wrote to memory of 712	1792	msedge.exe	90
PID 1792 wrote to memory of 2376	1792	msedge.exe	91
PID 1792 wrote to memory of 2376	1792	msedge.exe	91
PID 1792 wrote to memory of 2376	1792	msedge.exe	91
PID 1792 wrote to memory of 5044	1792	msedge.exe	92
PID 1792 wrote to memory of 5044	1792	msedge.exe	92
PID 1792 wrote to memory of 5044	1792	msedge.exe	92
PID 1792 wrote to memory of 3376	1792	msedge.exe	94
PID 1792 wrote to memory of 3428	1792	msedge.exe	95
PID 1792 wrote to memory of 3376	1792	msedge.exe	94
PID 1792 wrote to memory of 3376	1792	msedge.exe	94
PID 1792 wrote to memory of 3428	1792	msedge.exe	95
PID 1792 wrote to memory of 3428	1792	msedge.exe	95
PID 1792 wrote to memory of 1624	1792	msedge.exe	101
PID 1792 wrote to memory of 2204	1792	msedge.exe	102
PID 1792 wrote to memory of 1624	1792	msedge.exe	101
PID 1792 wrote to memory of 2204	1792	msedge.exe	102
PID 1792 wrote to memory of 4732	1792	msedge.exe	104
PID 1792 wrote to memory of 4796	1792	msedge.exe	113
PID 1792 wrote to memory of 4904	1792	msedge.exe	114
PID 1792 wrote to memory of 2004	1792	msedge.exe	115
PID 1792 wrote to memory of 1296	1792	msedge.exe	124
PID 1792 wrote to memory of 1296	1792	msedge.exe	124
PID 1792 wrote to memory of 4024	1792	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-45059-2ze73v.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb8ef9c188,0x7ffb8ef9c194,0x7ffb8ef9c1a0
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,12294908937021725234,3773839689724542401,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,12964172143803381317,7153932805308962491,262144 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,7863689296561470884,4993237024619849001,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,3920642860732421475,13098238392032581977,2097152 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,2889049462241929006,6170735107853102138,2097152 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,13100335757500052028,8655925548959198889,2097152 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,16415129104495271581,17049136847479030706,2097152 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,17022035688102503454,2018519380461053916,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,6374808522191501138,5082448528964897561,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,18423232897882040226,15369922251266120532,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,18423232897882040226,15369922251266120532,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,16899459094229970173,18178081901688727847,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,12084156545091619673,2852946662684583590,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,3639970495815521068,16740123426847563737,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=1852 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9173447876224587221,15183035082238002894,524288 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=784,i,7143509305960504928,17420705352477264055,262144 --field-trial-handle=2272,i,3358089089479244727,17518703038618083275,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05b7a938-4c1b-4534-b3f9-67e5b0cbf4c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05b7a938-4c1b-4534-b3f9-67e5b0cbf4c7.tmp
Size 8KB
SHA256 f5e6afbf62b484125a1cbbceef3bbdbce208a0d8314eafb3a681cbee846d3a73
MD5 428a0d0ff8bcef35f6db040db0efde3c
SHA1 8eb32ba91e0fcd3ff1157e7d7b6f1480b9b9a8fd
SHA512 f2f76acb8e4be9be5f107f8dc9a8c9d2aa3dbe3398a81257fa439ea69325294f9351fab9cbade84c61f53db4c1f5688676380990485bc0a1efba1b36f5c1edcb
SSDEEP 192:EONMS6nnH0QmiUyomLJGYcX5hQDP1Djzor63I3wXkeIg37q5VU6:EONl6nkFmMNX5+DtT863IAX7IVU6
TLSH
T174121C35BCA8BC6B5EE3A595B0C731139FA51167D6887BC0D6EC1E2C01DE66C634AC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

152ce3c6-df5b-49f2-ba82-e0f4f663d67f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\152ce3c6-df5b-49f2-ba82-e0f4f663d67f.tmp
Size 18KB
SHA256 99e17613f462baa8823a4ccad00d5eb3944175f23573dc70bdf852d8307e27b9
MD5 9ac66372a44fe182cb082271724c5249
SHA1 2b2e9d8cd75cb719f93a0b5a5410be630dd164d2
SHA512 5e9793c3715df56dd71b0d4487c344d9df1c908227f68d2193a2c2e6243be5a006d9f55c2ebce77aedb14035e1dfb8ac3bcb528e6e35ea68a021b6c519139342
SSDEEP 384:3ZcIhsN8B1YiqR+dcQX5+DtT863IAXOIVtgOIwZOyjoN:/hEgdXkDLjOIVXsSG
TLSH
T183828F329CB86C7B69EBA540F5CB32139FB45067D2C8AB80D5ED6F1D00D96A8130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1fc14f5c-f2ed-4003-ac34-6a20ec0e2636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1fc14f5c-f2ed-4003-ac34-6a20ec0e2636.tmp
Size 21KB
SHA256 ef79b47de40606e0381903bd64634b8fbf039dadef5b9fd609a75af8f9dbca8e
MD5 271778e75b4b0331c8e0446a8dff078a
SHA1 c898aabaeb69875b8e112845361a45c01622e69a
SHA512 ce0dbafd1f5204fac362a45189a3c05cbdf16543f0541f6fcd57f8dee248051a5e232683ea08a9f294a792234069fb84ec94c1bfbf0ce529e69121d160225f47
SSDEEP 384:miFiZcIpzsN08TUNTUlIlB1YiqR+dcQX5+DtT863IAXsIVtgOIwZOyjoN:NFQJ5wgugdXkDLjsIVXsSG
TLSH
T1A2A26D339CA89D7FBDFB9A84F58A32038FB45067D584EB80E6DD5A1D009A5D8130BD53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

3641c182-b769-4516-a2bd-83ea66cc34d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3641c182-b769-4516-a2bd-83ea66cc34d9.tmp
Size 27KB
SHA256 a87513028e816756a3d1f6f0b39d400b2c3a4588a04a8fe0c4552a6ac2078e45
MD5 b0547991514bbcef3f470ed3e7610b6b
SHA1 a5e94276151ac187da23eceddffc36ca7563d89d
SHA512 9a6e629effc5520cd5b851bd59963c55abffaef88afb8a096890f508ec8a80b4036b24cbca4a065e9025eaaae6d03f0e6b095f7cfe3101841084472749894a16
SSDEEP 768:8RyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXDropJVw:8RyYR7jWv3NpBu1ja/CL8OXwW
TLSH
T1A6C2E92B640DCB7E4FC01E9DDC5A6FDB2E9802C7A6548D4047FA954C02C77EEA12A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3eddaa84-5cd2-4b5a-836f-0475345f3afa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3eddaa84-5cd2-4b5a-836f-0475345f3afa.tmp
Size 10KB
SHA256 fbf323402cac2d1af54a6f9bfccd9267d6b7727f46b1edf9f5380d6046cc935d
MD5 b5bd0f76dde341709cde88110d60761c
SHA1 3926bd0b9f7dc20ff040c34740c3fa2162469457
SHA512 4ec3435b28eef68b935b1f3987bdf7eb26fdbad4358a815378fda30594d6d61b197c26eaa34618a2d4c1d762c3d02fa548f4c26d0a1fc81a175e9d9c7234fbf8
SSDEEP 192:sxZ3ZRWWjt/fZsnslvKueIdpHUHW6+WNGYYByQFIg5CJ:sxZ3ZPjt/fZsMNP0HbGfLk
TLSH
T12322B7526E28697B9CC7E319BB55BF13E6F9503291941E48EAFCC61C05E7ACE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 589a6896816b793b3540ebe745d05d40944be47ce92adb9824fd1bbb65655db1
MD5 36ebd9842006c85a96f47a0ff65d160b
SHA1 c82c02b5961903df193779e52ab38f2b28262388
SHA512 cee9ee384be345e63740ac9cc5306159c1eb18e2a82a221c13f01554a0a8158b4e33eb83ea8314afce5f69b1115088e850d9b5915347a483dc879b93f1d60e2a
TLSH
T1836182D2C4E069E9FBFC43B965D53B83B73895C2768B5D2301A4D4BA44063D9A682074
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4a849c24d45cf0c108bd732aa3f555970b42dcddcbed6381a720a42769384df6
MD5 8250da3ceaaadb6caeb140266a7f2aba
SHA1 4c7ab10af3e07d1e05793e2f008ef5f0adf80556
SHA512 296f93d520b72d1335e8005f5a9a579ad689cddae5a9315ec88868087727bf2d177b17d9c10f194aef98704e55b6fc7612e8f6ff7a02977c08753a06c3dcad36
TLSH
T1A76194D2C4E069EDFBFC43BDA5D53B87B73895C2768B5D2300A8D4BA48063D9E682074
MD5 SHA1 SHA512 TLSH

Submit Download

57e87da6-f1c1-4461-8575-a612df87979e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\57e87da6-f1c1-4461-8575-a612df87979e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1ddf9126-6b6c-4ede-8744-94e2698053f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1ddf9126-6b6c-4ede-8744-94e2698053f7.tmp
Size 949B
SHA256 768f5fc84a2b4f363e7ea6182c366d925b4fd290cefaf7e02c48ee883e805e7f
MD5 10ff368495da8de3b91759836ebf1847
SHA1 cda4852dfbe3f9ba8ca93da4c718966b82be41fa
SHA512 643572360df7b70b4094592477cf0cac3725b68b8137652a24e50ca8ce74b2397e2a8eac4c7c314976816c89bb10418996fb03f33b42f8c2193dfd485a15f08c
TLSH
T18D11BDF3C3D585AE890156F05A24BE2BCE1C0605421C3C19C5D4EF6B83E3475E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

88ccfabf-e830-4c45-9e97-6680ee927989.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88ccfabf-e830-4c45-9e97-6680ee927989.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

cb4ee720-b9ac-4764-980a-d70295c5fcd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cb4ee720-b9ac-4764-980a-d70295c5fcd5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7ec6a7480dc28876565498fb978b304e52cb8a28b7f49ec968b029c5dbc92878
MD5 26b58608943a1f5836605c131ea1f55c
SHA1 d8411f08121de876521cddfee10881649ed6a586
SHA512 836a14e4b8b3643a1ddca16eaea264d9ac3354c07527bc54b6d45cf3e70fa10a9d5ec1ca07b2db2b95f98379da7dc6f91a73d071545f61ce6d1b71c69c09390c
SSDEEP 96:KwhQwKpq+nvKFxvV1xQRAsyJxKa4yPx+Hf4JMDeKMgN:ITnvKFxvV1+RAFJL4yPoHf4J34
TLSH
T10791584232BB0250387D2A4C4574CA7B868275B33115EA6BBFBC52A54E6FE045CFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a65a6d7f-df97-4710-948d-fc651d8d1387.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a65a6d7f-df97-4710-948d-fc651d8d1387.tmp
Size 9KB
SHA256 11cdae608a44ccf948d669ea6c9a4cd6048b75c358f66e23feea688149836536
MD5 68761e78b8c61ca3204199c56ec5cab6
SHA1 5ecd4800bce9677fe963047cee666dd0c94cf105
SHA512 565511c5a938c945f48c2cd423078775318e15af6ebc0e341faa064ad8c44901c65c1176c900c95fa583f761f1d8ef529289eb7fcb63bbfde017f656d5f2b6f1
SSDEEP 192:sxZ3ZRWWjt/fZsnsxKueIdpdUHW6+WNGYYBaQFIg5QJ:sxZ3ZPjt/fZsMNP+HbGfDm
TLSH
T11122C6526E38A57B8CC7D319BB55BF13E6FA503291941E58EAFC861C05E66CE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc967977-2f32-49b2-b268-4c0b5c0c2af6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc967977-2f32-49b2-b268-4c0b5c0c2af6.tmp
Size 9KB
SHA256 c05c81bdc730872393555f1865a55b8986e6649483c249c6658de784a260d170
MD5 4d90fd40bcbf16fd316a9c8c1f5c262a
SHA1 c7e62dac4b6b056c8dcdfd5f4043c912cf8bed21
SHA512 a9d38ac4280ed665630d48406141ea18cffad3ca7f6e1ce7e71af87e2408ee15ce24f071973eefb9496b8716925ff2d68abe69596d34ab2c9dcf5fe3bb450fe1
SSDEEP 192:sxZ3ZRWWjt/fZsMsxKueIdpdUHW6+WNGYYBaQFIgrJ:sxZ3ZPjt/fZsVNP+HbGfD9
TLSH
T13812C7516E28A57B8CC7D31DBB65BF13E5F9503291D41E58EAFC861C05E6ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3391720-84e5-42eb-8c23-3a6cd8e089cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3391720-84e5-42eb-8c23-3a6cd8e089cc.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1a5d819-5f91-4df4-9608-0d9ef45ffc14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1a5d819-5f91-4df4-9608-0d9ef45ffc14.tmp
Size 10KB
SHA256 b778019f2b7e29e75a638c2144dc978ae88e9ae56a8735dc7c6cf902481fde4c
MD5 036568fcad95cb54c1c5d7c5449ac345
SHA1 23b73c6e829be3d95f2c82a8cd8cd95ed2da372f
SHA512 02bf7f29298d061742ff132f1536256fc556124a731006c937fa9fc54d96692b272245bd6f32d504a71bafa2d0384863b8e2ce6a33a0606317a1e4ada04714c4
SSDEEP 192:sxZ3ZRWWjt/fZsnslvKueIdpdUHW6+WNGYYBlQFIg5CJ:sxZ3ZPjt/fZsMNP+HbGf2k
TLSH
T13C22C7526E28697B9CC7E309BB55BF13E6F9503291941E58E6FCC61C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a401080a-bb2a-4b41-98da-b152a8d14396.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a401080a-bb2a-4b41-98da-b152a8d14396.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9d1cd87-1771-4f0c-93f4-dcc218604356.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a9d1cd87-1771-4f0c-93f4-dcc218604356.tmp
Size 18KB
SHA256 09625a7fec3d85354ed59675e5a7a1aa5a76b0af84e693f3096d172476aac35f
MD5 a6773c9505dcc372c393344904575044
SHA1 fe0e8f988dfe4dfbb918189d391bb5a19340f4f2
SHA512 ce84f7abc18434c2c886e3f410903836abf66e482795b819b8074a16a1ced16d31286afd1935842034c5403998a3e03b18b17d0d1ce0a498b535b4834e68806a
SSDEEP 384:SZcIhsN8o1YiqR+dcQX5+DtT863IAXOIVtgOIwZOyjoN:ghlgdXkDLjOIVXsSG
TLSH
T1E8828E329CB86C7B69EBA540F1CB32039FB45067D288AB80D5ED6B1D00D96A8131BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecb91450-90d4-4dbf-b7ad-1913fcefed94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ecb91450-90d4-4dbf-b7ad-1913fcefed94.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

feb95e36-c240-4c6b-b6b2-72322876fa8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\feb95e36-c240-4c6b-b6b2-72322876fa8e.tmp
Size 8KB
SHA256 001a1f437e91efe9b32ca9def2f3c939ad1dc9c5bd769e33d585b0f6eefdc57a
MD5 c5a1b095ea7cc702a8e2f525b83204b4
SHA1 bc40cc8495009a4da2e8ad994a04222a7b8986a0
SHA512 42ca7ec776923c6acb7591ab5be62ca1499997ee5d062216cc77259787c4280c2bd7b6cee3d0b964404176cc56dd1956dc9d67df19c6002bf1d504165a014760
SSDEEP 192:EONg6nnHGQmiUyNLQYcX5hQDP1Djzor63I3cMcoF+8U6:EONg6nC6QNX5+DtT863IYUU6
TLSH
T1E702DB35BCA87CAB8AF7AD45B08633139FA52177E5946B80DAEC5E1D00D765C2306D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8874accb0b9a94eb52f36a6e0645014a39166277620457f4444547cab120fc88
MD5 1ca63ae31441fbdf58f0b065755342a0
SHA1 19aceb337afe319ce80d1870666ddbb56639ea1d
SHA512 6dc66caa68317a8dcf4b88a2f90cd77beb8c45bc04e1739519ab6e93b65676feb40be1c3e4fc81540efc022fff086400f8b9c874a78880354c3140018c449ad6
TLSH
T1A341F658A6F91248B3B76F5A9BF6A86D587E7D332F46949E00010D4F0A33B41C962B37
MD5 SHA1 SHA512 TLSH

Submit Download