5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-1388025-sulsbf.htm
Size 194B
Sample261001-vxpnpswset
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{751FE702-A8A4-432F-AC6B-01D34C8E631A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 6040	4572	msedge.exe	85
PID 4572 wrote to memory of 3744	4572	msedge.exe	86
PID 4572 wrote to memory of 3288	4572	msedge.exe	87
PID 4572 wrote to memory of 3288	4572	msedge.exe	87
PID 4572 wrote to memory of 3288	4572	msedge.exe	87
PID 4572 wrote to memory of 548	4572	msedge.exe	89
PID 4572 wrote to memory of 548	4572	msedge.exe	89
PID 4572 wrote to memory of 4980	4572	msedge.exe	91
PID 4572 wrote to memory of 4980	4572	msedge.exe	91
PID 4572 wrote to memory of 4980	4572	msedge.exe	91
PID 4572 wrote to memory of 452	4572	msedge.exe	90
PID 4572 wrote to memory of 452	4572	msedge.exe	90
PID 4572 wrote to memory of 452	4572	msedge.exe	90
PID 4572 wrote to memory of 5328	4572	msedge.exe	101
PID 4572 wrote to memory of 5328	4572	msedge.exe	101
PID 4572 wrote to memory of 5924	4572	msedge.exe	100
PID 4572 wrote to memory of 5924	4572	msedge.exe	100
PID 4572 wrote to memory of 3920	4572	msedge.exe	103
PID 4572 wrote to memory of 4008	4572	msedge.exe	112
PID 4572 wrote to memory of 3800	4572	msedge.exe	113
PID 4572 wrote to memory of 4848	4572	msedge.exe	114
PID 4572 wrote to memory of 5536	4572	msedge.exe	124
PID 4572 wrote to memory of 5536	4572	msedge.exe	124
PID 4572 wrote to memory of 4320	4572	msedge.exe	125
PID 4572 wrote to memory of 4320	4572	msedge.exe	125
PID 4572 wrote to memory of 4268	4572	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-1388025-sulsbf.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc7692c188,0x7ffc7692c194,0x7ffc7692c1a0
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,1738249048936224838,7931734172875164306,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,13290343103628951749,14443255422219915204,262144 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,13701815968804178528,1863391072205756109,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,7048194939236315319,5950942667746816961,2097152 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10011459877765450471,5968883591282120641,2097152 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,15077988436823221806,8671087791844448211,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,10680122439797711534,8828781409711845141,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,10673301735092226278,13216407513510139325,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,10673301735092226278,13216407513510139325,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4809009872240418253,2921669952548944585,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,272928623428941935,14148150955987558380,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,14513652127559375299,12772593299942408362,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,7468578968898093588,12584644205971547462,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,10796160429607407915,4821940483664040338,524288 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5388,i,7238444079341398434,2345677725897391681,262144 --field-trial-handle=2288,i,7290905829098137224,8201712972171830384,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4268

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6df0985c-4fe8-4464-b2fb-36844877fd16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6df0985c-4fe8-4464-b2fb-36844877fd16.tmp
Size 26KB
SHA256 63c4ac0e3ffb0447cafe76b4df6b4381c48720d3e4d90813766524135466a2cb
MD5 cc8a94e49900f19cf2452354951a2e68
SHA1 d69e8d7de9525dc704b7a90ed669aba42590f456
SHA512 7b7e9d36ff8f4678a1d92915b1836cb4c966421dec1b56bd66a55db95275171b0adc4f8dd4b16f79e36da9c95b588e6b2f9a32ae4c7f99a1e12c4a0a28200119
SSDEEP 384:n9kiFiZcI83sN48TUNTUlI4faKM7yawzWf/BC2uZneCUOcuwMiI1tgOIwZOyrEt/:VFQ839wgN8R4BCnnr/cbMiI1Xs3z9
TLSH
T18AC25A72ECA8CAABEDEB4ED9A74A3603DEE05113998C9AD4D9D91D1D00971DD030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

09426312-99c6-4535-b269-2125ec8b3c85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\09426312-99c6-4535-b269-2125ec8b3c85.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

2a0b75e8-79ec-44fa-968a-10caeea982f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2a0b75e8-79ec-44fa-968a-10caeea982f9.tmp
Size 11KB
SHA256 53c6a6684af849a51df8a94a64b20257d69cf5cf8c7d1b671c29b6c8aee7351f
MD5 b5958a1a059a4690283111d568983322
SHA1 99f35beb87b9fa43b391409beecdafc9e6f211dd
SHA512 a7d0d4528d40983d3ca425433e2134e94f9516c42f0ed2f0d96be2416dd61b83658d4ebe93fd665d2df242db7be0999d98887f6751fd30234b47e6209f5ce27e
SSDEEP 192:sxZfRqGk0/fBsLaQZLo8WzodpHonHW6+WNGYoWTSsLIgjtSJ:sxZfot0/fBsOObtUHbGKSujtu
TLSH
T17D42E8556D68A97B8CC7D21DFB55BF93E3F9103290811E48AAFC8A2C15E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b585bd3-7bfb-4048-802b-a61b1537de02.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b585bd3-7bfb-4048-802b-a61b1537de02.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e185398ee6f304963e7f3e7d0a18d080917c7f45d6c622d97bdb20b164ed43c8
MD5 815a8bbfcc0195efa88a79258de9bebe
SHA1 16326ae6c6f22d88e1c7da6a5d2af81a7f79aea8
SHA512 6d1ea8c93bff17430958d765fec178801fedd844a36350e3ccae9ec873e82b01c510d3846fb0a8bbe996b30b5a2d131b177ef5003f68bd863eeef9b09a99b2c8
TLSH
T11CE026E469CAC22FF61864D70378774C93B0361B92C069AE3B00C9897905448ABA3EE4
MD5 SHA1 SHA512 TLSH

Submit Download

b10332c3-fe79-460c-a905-183f36510812.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b10332c3-fe79-460c-a905-183f36510812.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

35f21704-e382-4ea1-aa8b-1ec8fd6347ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\35f21704-e382-4ea1-aa8b-1ec8fd6347ae.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

80f94f08-2dd3-443c-a3b6-17aed67a2686.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\80f94f08-2dd3-443c-a3b6-17aed67a2686.tmp
Size 1KB
SHA256 e157f9e6010f165776e3d84a73f409730edb7de590f0c40973834d04932ed581
MD5 ef7e0d17f99a6646c7689eeab2c130e4
SHA1 2c6bec2a7354b68487a48d97d73a2d3433d8ac6b
SHA512 edff83227bc27d089c62d7a07c4ec21330bda237675d3f3c6115ac5e71824cef64513feac193b68f102abbdedfa81a9e9c1f993bdc1903c739302fe4151792fa
TLSH
T1EE319FF3C7E8C66E890156F0A618BE2BCE2D0A54432C3D5AC8E4AF6B93E2471D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

b086f392-329b-46d2-a257-17396207a0b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b086f392-329b-46d2-a257-17396207a0b4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9738b29f540f65881931f7021159a4844a1e8ef95c9c68f5c3206b335b877355
MD5 ddb614ca76de9bd91dbed433dbd23273
SHA1 55c336236adbed1d76bc79dd76fa1a2c8d43bb75
SHA512 43a95de7e39500c3beaf35220bc40f9e404e68bebe205d80d71a349e40013f71ef8510c52b4861aa3e121435bfa8a0aeaf12044f92cbb9cfa4397452ba8b5953
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgX:ST/2dXOJhJlpfnpp3tNXVrN3Glnm
TLSH
T18CB2131571BB421039FE391892B6972E164231B33119E66B7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b8d2f3a6-66bc-41fc-80dc-ae7af12f5749.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8d2f3a6-66bc-41fc-80dc-ae7af12f5749.tmp
Size 11KB
SHA256 2eaf24f54d8263665050228f8a141a23036c9b8a9821c8ca9930d3888c38e6b4
MD5 3a38bd8a5971c7b3b7574db08ddecce9
SHA1 460ec400fe1a5185df4afca635eed54d27526b39
SHA512 3d2eee87bfe7066eac474de456a177057076c9ec59c8359a0e7873adebef0ad564fd2f648123ae0650e3caa60cb78403ee65cdde5199bc8308aafb27aa078a02
SSDEEP 192:sxZfRqGk0/fBslaQZLo8WzodpHonHW6+WNGYoWTSsLIg5StSJ:sxZfot0/fBsYObtUHbGKSuYtu
TLSH
T19A42D6556D68A97B8CC7D219FB55BF93E3F9103290851E88AAFC8A2C15E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c68e0beb-d36c-4b7f-880a-87f9c6703e63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c68e0beb-d36c-4b7f-880a-87f9c6703e63.tmp
Size 11KB
SHA256 1603b0de048ec6170939a1e04222e933b782c5f008c81c04e8a192cc3b4dc84a
MD5 c565552e3cf7930282217295a64facb4
SHA1 2ab07449cfe57b4571dccde3903fbc36b9c768d6
SHA512 ae6659dc8793532e45aa90aa9438e067a32872c1a3e0f28faad622985f92e20466d33d3174403e3e7a1c2c730ab2f489793beb1da864cf6286237b8633981bfc
SSDEEP 192:sxZfRqGk0/fBskQZLo8WzodpHonHW6+WNGYoITSsLIg5StSJ:sxZfot0/fBskObtUHbGYSuYtu
TLSH
T1F142D7556D28697B8CC7D21DFB55BF93E2FD103290811E48AAFC8A2C14E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecb7fee6-5ce8-4729-b6f5-89f3b07ef01a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecb7fee6-5ce8-4729-b6f5-89f3b07ef01a.tmp
Size 649B
SHA256 d7006096cb9d232247e6fc7b8b7759dbf6921929148451c55edf454329ae8ce0
MD5 307ec2d392189a98f8c9dbf5d1492699
SHA1 a30ea5501c58d0944101af86f221d31539ce2330
SHA512 debd820b88cda0b89fb80e688f6af29ce8999b4d8e33e53072630e0e78db42cfe2313bb84a4e06c1e9bf6db96fdb501338be9d03717a37b0df7e536c517de735
TLSH
T1C4F0F4A5C925EC3B08FD0B796494074AF750236B2A41984F3B3E810C8FB063B468582C
MD5 SHA1 SHA512 TLSH

Submit Download

a27b48a0-2b6f-4e17-bcd8-a9d66ad60118.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a27b48a0-2b6f-4e17-bcd8-a9d66ad60118.tmp
Size 26KB
SHA256 95c6e6e8b856761b4f3edadc0a3c5b8b4237c2bfa89f59fe54e389b761a1f0c9
MD5 932381407af67c516484faf3483a07ad
SHA1 720d9c59f47ffff2f0117252ea1e912cafbd76ce
SHA512 2297bd6473a817f04738c3773168e3648dc86bb73c080aec481b3f297425d531d9d5d76f7a62beb99c56d003dd8c10135aa6ead6684ba5968d19f8b7fd44722c
SSDEEP 384:nZkiFiZcI83sN48TUNTUlI4XaKMcyawzWf/BC2uZneCUOcuwMiI1tgOIwZOyrEtQ:ZFQ839wgnDR4BCnnr/cbMiI1Xs3+9
TLSH
T125C25B72ECA8DABBEDEB4ED9A74A7603DEE04113998C9AD4D9D91C1C00971DD030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6bfad1d-3116-46f3-a636-915c01c4c845.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e6bfad1d-3116-46f3-a636-915c01c4c845.tmp
Size 27KB
SHA256 62de7f7d49298e8f883854fc236bc6d94566860a4b6b0d468425d4229db246f2
MD5 8ad22abf524b1ebb13e2a464bd578fbb
SHA1 8669b4da0a79c3c9636fce3b4e2ea698d9c58b54
SHA512 07e928605d166af9169b0e3e714e34667bedfd0db26ae2b60088c12cfcb49cc4121e0d4f6af96a1392b64bba598a632e4a6d781c7a50eeafefd88b9f22f21f30
SSDEEP 384:nZeiFiZcIKu3sN48TUNTUlI4XaKMcyawzWf/BC2uZneCUOcuwvmI1tgOIwZOyrEG:rFQR39wgnDR4BCnnr/cbvmI1Xs3+9
TLSH
T1A2C25B72ECA8D9BBEDEB4ED9A74A3603DEE05113998C9AD4D9D91C1C00971DD030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f05b7386-5bd9-42f9-9b07-1acc953ab172.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f05b7386-5bd9-42f9-9b07-1acc953ab172.tmp
Size 25KB
SHA256 6f2bbd64552e7cc80c6f54cbc7f4a8e6c97719365f93ec1c23b2fc3c9546c2cc
MD5 aa6589acc7c99b89200bd48dcb66e561
SHA1 ad661e6cc9fb6a72e84692073007eecba844c76f
SHA512 a7be9920494b57cdea7d2b005602794c7711a460dd85d110c2d33c28a05cd2cc777ea3acecdb7ece5a07a7037a6b59d6bfd69e41e81767d18cc75dca4c700c74
SSDEEP 384:nWiFiZcI63sNu8TUNTUlIm2aKMi34wzWf/BC2uZneCUOCFIL+7O6R2Feo3IgL/7T:9FQ633wgcaH4BCnnr/CFIi7TRyx1
TLSH
T181C25C72EC98D9ABE9FA8FD9A70A7A03DEE01153958C8AC0D9D81D1D00975DD0707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aed95d79b8b14b8e00a06bd84d491b9a34996571dd2b53df188cdf4b0c0dd99a
MD5 dd638b992e9a42de1032c6742ef104d4
SHA1 b0241e8135880f394e498e8c7fcaa0eaf788a7c5
SHA512 1e56325bf61d14eb746aacb50ea2af14836a2b26a4aadb323bf5dbe4f9ceab8cf149aab9c06808529d83dd0be1d361b6e5bea6771ca9cb626faf5fd828cf1a21
TLSH
T129410758A6F91108B3B76F5AABF7A86D887A79372E46D05D10110E4F0A33B40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3920-198-0x0000025FBB0E0000-0x0000025FBC0E0000-memory.dmp

Download