5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-1388025-arz8vf.htm
Size 1KB
Sample261001-vxll2sha84
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4564	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{366E29D1-B5DB-4824-822C-4A5AC03EB34F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4224 wrote to memory of 4212	4224	msedge.exe	86
PID 4224 wrote to memory of 4564	4224	msedge.exe	87
PID 4224 wrote to memory of 3480	4224	msedge.exe	88
PID 4224 wrote to memory of 3480	4224	msedge.exe	88
PID 4224 wrote to memory of 3480	4224	msedge.exe	88
PID 4224 wrote to memory of 4388	4224	msedge.exe	89
PID 4224 wrote to memory of 4388	4224	msedge.exe	89
PID 4224 wrote to memory of 1360	4224	msedge.exe	90
PID 4224 wrote to memory of 4852	4224	msedge.exe	91
PID 4224 wrote to memory of 1360	4224	msedge.exe	90
PID 4224 wrote to memory of 1360	4224	msedge.exe	90
PID 4224 wrote to memory of 4852	4224	msedge.exe	91
PID 4224 wrote to memory of 4852	4224	msedge.exe	91
PID 4224 wrote to memory of 2484	4224	msedge.exe	93
PID 4224 wrote to memory of 1952	4224	msedge.exe	94
PID 4224 wrote to memory of 2484	4224	msedge.exe	93
PID 4224 wrote to memory of 2484	4224	msedge.exe	93
PID 4224 wrote to memory of 1952	4224	msedge.exe	94
PID 4224 wrote to memory of 1952	4224	msedge.exe	94
PID 4224 wrote to memory of 4820	4224	msedge.exe	99
PID 4224 wrote to memory of 3880	4224	msedge.exe	100
PID 4224 wrote to memory of 4820	4224	msedge.exe	99
PID 4224 wrote to memory of 3880	4224	msedge.exe	100
PID 4224 wrote to memory of 3976	4224	msedge.exe	102
PID 4224 wrote to memory of 1060	4224	msedge.exe	112
PID 4224 wrote to memory of 4428	4224	msedge.exe	113
PID 4224 wrote to memory of 4732	4224	msedge.exe	114
PID 4224 wrote to memory of 4516	4224	msedge.exe	123
PID 4224 wrote to memory of 4516	4224	msedge.exe	123
PID 4224 wrote to memory of 2176	4224	msedge.exe	125
PID 4224 wrote to memory of 2176	4224	msedge.exe	125
PID 4224 wrote to memory of 1764	4224	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-1388025-arz8vf.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb7bc5c188,0x7ffb7bc5c194,0x7ffb7bc5c1a0
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,4849770307832400582,554095704384183087,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17838630190195012413,2050068169338581100,262144 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,6801262639983213978,10093240468699580065,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,2811834092683821334,11125163998928576827,2097152 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,10869556412489669085,8193315609339898827,2097152 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,614675153461934871,8333981178807041618,2097152 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:2
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,6093482582677906721,5944638120092838781,2097152 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,5976604620251619323,15564483048557445255,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,9306932689536262942,12551432963807880557,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,5313312849321282364,7421034824914488996,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,5313312849321282364,7421034824914488996,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,4940114317350109314,13154226209410743159,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,12572358644563244893,12215389731311122589,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,17860336784343350357,15968890962821291936,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2040,i,6649086154678513,18073654563535378271,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,13680313369526617992,16087281917681912442,524288 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6040,i,14959297804478480913,5474602417512572994,262144 --field-trial-handle=2084,i,4336418887450318927,3842058532169874363,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

53fc1b66-5e8a-4523-b51c-52b8a5de0b66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53fc1b66-5e8a-4523-b51c-52b8a5de0b66.tmp
Size 18KB
SHA256 ed1ac79cc8ba3f2a0f32474d5e02abcae5e06a0bae6d57a6ad67a0c553aea6cc
MD5 ce5e19716851f3ce6aa029054d6a90b5
SHA1 f4b508aec719e3693de9ea4831eeb2263546c111
SHA512 829817d846f4959843d0cfb9d7a76bf342fb6c3810ba945bbe4066e7e883318b89f8fe2a3a7b857611716ef66613e0c4b878fed7781d07c13a185fb5b3c389ae
SSDEEP 384:DZcIhsNeCwWH0drBf/OjTV+cO+nFCjl+2lSKtgOIwZOyscoU:bhZfGnhOsIjllQKXsQ/
TLSH
T176827D766C785D7759F79140F58B22038FB890A7D6C66B90E4ECAF1D01DAAAC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64f07b92-4bdd-4766-b223-1ef82b6733e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64f07b92-4bdd-4766-b223-1ef82b6733e9.tmp
Size 21KB
SHA256 d0586c4dbd984fc19876e4e7a35f8061a0b99e294c6dfe40f796478a698e4ccb
MD5 d4f91130a390168bfd6daa84a454abf2
SHA1 8584e1b02dbffa8fd9e65d102fb09857504817b9
SHA512 d31a01cdcd045693f5cd10d4b19832875e201fd920819e57e2fd95b474ed50db48e9e5e9c26cf13ccd42a49ed67603fa3b754416cc8b7b542045dcb0efccee78
SSDEEP 384:IiFiZcIvzsNu8TUNTUlIlDwWH0drBf/OjTV+cO+nFCjl+2l2KtgOIwZOyscoU:TFQLjwgafGnhOsIjllIKXsQ/
TLSH
T14DA26D7358A88D7BADF79A80F54A22038FB850B7C5D6AB90E5DC9E1D01DB5EC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68b63bca-3a62-44c7-8ec7-547c8d5ea422.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68b63bca-3a62-44c7-8ec7-547c8d5ea422.tmp
Size 8KB
SHA256 a07d150fccca45ccbac7f2f67389ef3aaec35543975a6a0340bcacdf95b5b695
MD5 31f11847008797b0e401c06a194275ee
SHA1 82bc54f404687fb34bb14c4808c81918b752ceec
SHA512 633ff097122dbb6b2a2e645b1acf706dd27f64d9f03afc10a76404a1d375d1146b57af2b764fe7804f825c820b1f87afc649784859e52a15ad0c4cfb07aaf96d
SSDEEP 192:SONJ6ygpQmiUykEk/tOCTVghcO+njzPzDsU6:SONJ6lHltOCTV+cO+n3UU6
TLSH
T14502E835BC687CB78EB26E45F58B27179FA4217BE9512B80D9E85E1C01D769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d20c7a9-ad58-41f0-a6c4-bd8a4ae49cee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d20c7a9-ad58-41f0-a6c4-bd8a4ae49cee.tmp
Size 18KB
SHA256 8e8c12528d84f5b479b1eb24874557cf6f01a607f2a6b526d6fd9e537ac43f90
MD5 2af6dfb07fae69c0dc0c56f0642c43b4
SHA1 8f57982fae0606e7c25aea33b9d56187170c6c5d
SHA512 c75a70309d94b50e843834caec3d1e607a81229e6dc7437e300715e135c0f1e30b4ac0b5600f6690cfe120043a10c0a74ed94afe096e805e83b4cc6673789e89
SSDEEP 384:rZcIhsNeDwWH0drBf/OjTV+cO+nFCjl+2lSKtgOIwZOyscoU:zhmfGnhOsIjllQKXsQ/
TLSH
T10C828D7668785D7759F79140F58B22038FB890A7D6C66B90E4ECAF1D01DAAAC130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1aab06ad-33e1-45d3-b532-25bc912aef86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1aab06ad-33e1-45d3-b532-25bc912aef86.tmp
Size 105KB
SHA256 b83cbf64cc348bda7418cf4d51290f954f1a229bfc174076604c71e6316695b1
MD5 e74d8b44e8d40662fd1b1b255738f7f7
SHA1 274571a893d99afe45f887bf62213edcdf6ce25a
SHA512 fdd52b8ff528e9564308a28f53b7774dc738711d7dccce592af97c88bf2722ddb380e7bf76101bce36a685c115e53c6bb3d415de6eecc3c382b674f304fb5a40
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7j:fwUQC5VwBIiElEd2K57P7j
TLSH
T1B2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

436deaac-8e07-423c-b75a-8f15cbf87d70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\436deaac-8e07-423c-b75a-8f15cbf87d70.tmp
Size 10KB
SHA256 ab2d696c8e6cddbb4c0b55fcbdc64f9c7b055d098c4e977074ab9dd2755798b2
MD5 e844a6c49fb2ebefa1f8b54f1cffea5e
SHA1 087a5a8fb1d8b3f4bfde5dd481527c5bbc5ba5d5
SHA512 38b12d1944ca52fe172c4746a0c109406714fe0ebb9c0e71a47fa68d13a0c9b78e772a7faba569f6f8a4087e1875629057767e5d1d29d49f14c0ea86b56032af
SSDEEP 192:sxZE+RRW7/fFsAJIdpdCHW6+WNGYRPRiVIg5arJ:sxZE+e7/fFsACkHbGmso9
TLSH
T1D722D8526E38A97B8CCBD21DBA15BF53E6F9503291D11E48AAFC861C04E67DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59d23694-c3b1-4658-a56e-3c7ac1d1905d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\59d23694-c3b1-4658-a56e-3c7ac1d1905d.tmp
Size 9KB
SHA256 5fa1dfa69badad11cd60319f41ff08701e6c7734d991c7dae220d5bb0a28a80d
MD5 46d6ae4efd1af1e777ea94037597350b
SHA1 cea8df27c59498fa0bcd19c109a2426951732e1d
SHA512 c8790edc3ffd96dd434db0229634c026740f4deee201d4634b2c7ec089c6ad5b18af19fbc6c7b123a7514c0c60abc8ab8887223afdc85e8e81f68debff93b8d3
SSDEEP 192:sxZE+RRW7/fFsOJIdpdCHW6+WNGYRPRiVIgrJ:sxZE+e7/fFsOCkHbGms9
TLSH
T1B722C8526E38A97B8CCBD20DBA297F53E6F9503291D11E48EAFC861C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f6aa34c-df84-4c97-8319-40caa76ea668.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f6aa34c-df84-4c97-8319-40caa76ea668.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c62cd5066d082c8316c486dd2cdf9b2de45c27e0a60c33fc950811ce3ce327f6
MD5 9fbbdd06aff7c665734dcdd8248b31ed
SHA1 4287e2f0561986cd06fbb99938e2eede26878d58
SHA512 6aa182f092489bdd6e99c933263f577c3298d8e9b1eb2993d90bce3c526a67e5531071e8e5a50c3d17d94475fc84487bb47804fceb3fff9824fe132c2578111e
TLSH
T162E07DE445CAC23FA64CE4C70368570DEBAC361FE2C4698E3F04DEC97845144B7C2AA4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 7e63aac0127a908364c454a9b6a1b0924dcb9d8338fb7bba6784751f1a02eb2a
MD5 97416d415c8f283bc1ecf4c5e3af0feb
SHA1 6cd2dd3b426625c603e0fdc2462a9b714be1b1ab
SHA512 dad1cb37be450518451beb39c5d978520ae0fad2b041d10e0d851c18467473e8eb6ff2baeacaafc677eaa0f27aecf51194599dbb88ce2ff2fa9676d43951ca6b
TLSH
T14F5193C8BD8144AEF7A808718AD73D873E75818B59B30D7624B8F8BE44CAB95FD1C050
MD5 SHA1 SHA512 TLSH

Submit Download

7b90f567-a8fe-4b43-8c55-2e3ecc86205f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7b90f567-a8fe-4b43-8c55-2e3ecc86205f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1485abcb-fd2c-4324-a86b-6c53a3572cff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1485abcb-fd2c-4324-a86b-6c53a3572cff.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a1f40b98-1797-4b6e-97d6-906af2e902a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a1f40b98-1797-4b6e-97d6-906af2e902a9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c95cc0e8-fc05-47af-ada0-bc895c57e5ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c95cc0e8-fc05-47af-ada0-bc895c57e5ee.tmp
Size 949B
SHA256 f50a03634b92eadf256542ea751c0cc77f40c30cd549191c0bc45a0ab505ef87
MD5 2ad7043ff6b80b7f356b9ba659666ab8
SHA1 abeec4de9106f1d4114e11041e3488fb90cffa4d
SHA512 8e5e8e306ab72b70016d2a4f41c95069ff41a76bb207394b7c013c90e68a564ece2e2196eaee4c4acd54f01a0c4a6eeb8870fea7ee4667049ae957059601d800
TLSH
T12E11BDF3C3E585AE8A0516F06A28AE2BCE2D0605421C7C1985D4EF2793E3075E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dcce8048939fef162a42d6e6a2620cf8a6e8cc7d04842396eaa18edf94717945
MD5 8c4e3c96ae59b80146d5ed10768701c6
SHA1 2230bb0fd51fc8a9407a2a3a85923a28f9034a28
SHA512 018784559ab0c36d75f779a50338347e68caa0a340f44a9acb3f4308d9412ab446de6e804f800e54e97da708eb9bf866d598330f568c2dbf3cf4f09200df7883
SSDEEP 96:K0m79EZtr/jkz/qP5lkKhB5DkVNtKrN5WXyKMYKKQQKRyax6NRR:NH9hfq
TLSH
T163A1D29630BB120178BD654981B5872A124235B3305CF7BBFFBD40A64EAAE544DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a437b149-fdc3-4e12-9ccb-17696ca5c0f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a437b149-fdc3-4e12-9ccb-17696ca5c0f5.tmp
Size 27KB
SHA256 545504b3a937fdf37cde12418e774bd6945380457c0105b3dd326c4b20ca46d2
MD5 5c346038288e3b4db0676b03df1b1592
SHA1 864fb220f030259408759d4f6328bb93a48144da
SHA512 585b808225a9163b50de8daf5ad4a1efa30355d6e7aa19c0c14bfffc02f6982185c320137adc2ccf2a521beedebe4d33a76b3a9eba9c7cc77d972e4bf48c5fdf
SSDEEP 768:waK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3XroU+/j:waK9uzYWvcQWsu1ja0HL7Q3EU+/j
TLSH
T102C2F93F640DCB7E4FC01A9DDC5A6F972E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0572de4-2789-4310-a8ee-6ac29b401633.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b0572de4-2789-4310-a8ee-6ac29b401633.tmp
Size 10KB
SHA256 c8249dcdf007b43e07d465eddfe52b1cef8fb0e68cb1ca3b5914664437a8c4f1
MD5 0c289e3a8c0a0fc908a973484621f098
SHA1 6672e66e6728a86cd55ee1c6c7081015d371b3ee
SHA512 f99ec587bbd882c246b4834c0353c5dffad9e7f1934030119dabb7b5ff57929be90324098960b931b0e3bc795db6d2f5abe1258327e6b602215eb0dd0e2f3586
SSDEEP 192:sxZE+RRW7/fFsaJIdpdCHW6+WNGYRPfiVIg5aJJ:sxZE+e7/fFsaCkHbGmioz
TLSH
T11E22B7526E38A97B8CCBD20DBA15BF53E6F9507291911E48AAFC861C05E77CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c57c4874-34ec-48bc-90b7-9ae61fd88364.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c57c4874-34ec-48bc-90b7-9ae61fd88364.tmp
Size 10KB
SHA256 cf5996d8684e808f77dc4227a6817877ddb00e3b5dc15731497fe8600a7c5c17
MD5 d7e255125e6b32b6f9ffc3e8b9d9da8c
SHA1 ee457864702a9f052507b1bc3af857cae1dbe1ac
SHA512 e2753b3458594fab3ac5ec4d0ef9d34eed291526b6074dff149e77da5515ef149d3ea1f97f519b32248fe9b8797d87ad9eec567ce65e6349b7e7dfe31089442b
SSDEEP 192:sxZE+RRW7/fFsaJIdpHCHW6+WNGYRP+iVIg5aJJ:sxZE+e7/fFsaCiHbGmPoz
TLSH
T13922C7527E38697B8CCBD20DBA15BF53E6F9507291911E48AAFC861C05E77DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1c82d17-ef68-4978-a35b-b11b98f5cb98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e1c82d17-ef68-4978-a35b-b11b98f5cb98.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36d33e22-e1ef-4049-918a-496c0e6cc2b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\36d33e22-e1ef-4049-918a-496c0e6cc2b1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e96fd2ad-e361-4162-8d3f-c03e0a6401a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e96fd2ad-e361-4162-8d3f-c03e0a6401a2.tmp
Size 8KB
SHA256 570161f817e9252bbf58f3a7660cf9ace6e556297ec0fff8e93b7b8cd3fa6de1
MD5 1f41e0dceaf9bee1333f210c65642b78
SHA1 b9163c656c3e2d84fd9ebad5a394a75c0736bf14
SHA512 75141896ea04d2800b37076e18705055bf3d3d0600e58a64e2e41422431f8e5015ea14b90d4418afa6e67fd84a8f8cc55d4890a8dd8db057ebd569175b5cc590
SSDEEP 192:SON/6ypQmiUyk4Sk/dOCTVghcO+nFCjl+2lz3UzFqjnU6:SON/6IKBdOCTV+cO+nFCjl+2lwKU6
TLSH
T1DE122A36B8786C775DE2A580F48B32178EA95167DA467F90E1DC2F0C01DF6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98c0e212-fe65-4b14-b077-a3b01c109ef0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\98c0e212-fe65-4b14-b077-a3b01c109ef0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 17513a93ef1795827161088583a5d120fd913bcb66b13550feaab1e0959c9e0d
MD5 70a2c5b2803938bc4f74f6400b448c3a
SHA1 abfefdd5e4db78449fc97235227b94672dee7550
SHA512 11b93860f9029ab1931a51885f239d734e9332a0cb1a1ad42ca0d0c41fb5da21aa44980c4d2b5229c707a655e62c4ab12da81baba359d84069cc95e2898bb499
TLSH
T147412958ABF91148B3B7AE579BF7586D847AB9372E4AD55E10010E4F0A32A00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download