6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 17:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261001-1388025-tjjfxl.htm
Size 34KB
Sample261001-wdvw2stdqb
SHA256 6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b
MD5 764f5df3b8d286714635f98cdaff2174
SHA1 6f65b07d81db9dcfdfe1482f1ba7a14977d87aa2
SHA512 323c8e03eabf4884fba35ca5253c79f370c09e0156bea23ca0e2c10d948e608a65b47dc8cca9450afb3a81a9c61ccb77d3ff7acd935d3658b61c415597cf2e13
SSDEEP 768:9srfAOHdia5Qe2E4rY0H1UeH+NypaNKiA9b:9QAOHdl5TkY0HeNVKJ
TLSH
T1DFF2D65356D19D37067396F4BCB8BE2C95CA8D0FC248AC04743CA90C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{83EC0157-630D-409C-9E00-915E2C4E3644}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 912 wrote to memory of 4552	912	msedge.exe	87
PID 912 wrote to memory of 5004	912	msedge.exe	88
PID 912 wrote to memory of 4760	912	msedge.exe	89
PID 912 wrote to memory of 4760	912	msedge.exe	89
PID 912 wrote to memory of 4760	912	msedge.exe	89
PID 912 wrote to memory of 1876	912	msedge.exe	91
PID 912 wrote to memory of 1876	912	msedge.exe	91
PID 912 wrote to memory of 2288	912	msedge.exe	92
PID 912 wrote to memory of 1376	912	msedge.exe	93
PID 912 wrote to memory of 2288	912	msedge.exe	92
PID 912 wrote to memory of 2288	912	msedge.exe	92
PID 912 wrote to memory of 1376	912	msedge.exe	93
PID 912 wrote to memory of 1376	912	msedge.exe	93
PID 912 wrote to memory of 212	912	msedge.exe	94
PID 912 wrote to memory of 212	912	msedge.exe	94
PID 912 wrote to memory of 212	912	msedge.exe	94
PID 912 wrote to memory of 228	912	msedge.exe	95
PID 912 wrote to memory of 228	912	msedge.exe	95
PID 912 wrote to memory of 228	912	msedge.exe	95
PID 912 wrote to memory of 2020	912	msedge.exe	99
PID 912 wrote to memory of 3636	912	msedge.exe	100
PID 912 wrote to memory of 2020	912	msedge.exe	99
PID 912 wrote to memory of 3636	912	msedge.exe	100
PID 912 wrote to memory of 1220	912	msedge.exe	102
PID 912 wrote to memory of 4472	912	msedge.exe	113
PID 912 wrote to memory of 2256	912	msedge.exe	114
PID 912 wrote to memory of 540	912	msedge.exe	115
PID 912 wrote to memory of 4472	912	msedge.exe	124
PID 912 wrote to memory of 4472	912	msedge.exe	124
PID 912 wrote to memory of 4716	912	msedge.exe	126
PID 912 wrote to memory of 4716	912	msedge.exe	126
PID 912 wrote to memory of 2240	912	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261001-1388025-tjjfxl.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffd5092c188,0x7ffd5092c194,0x7ffd5092c1a0
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,3808742959575225217,2464385357466925456,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1848,i,3051344304107022801,12456346538007171614,262144 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,8059789715424063087,2633352005778549406,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,15097479795643127524,9599611823419945538,2097152 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,701522705733971862,6981818640346213798,2097152 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,2010459362165552621,17057776675455682274,2097152 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,6697113569877733387,3634047157649171996,2097152 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8413629947599691942,8307045057967019920,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,15424039011700063521,14713940530828270191,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,18108651601714826859,4722969021660034998,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,18108651601714826859,4722969021660034998,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,12702171845522262450,7514277939729755991,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,12787931358218448753,11184131113763943613,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,2736603779077385423,812164207239301200,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,7566917026859471489,15538351349353514459,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,2215981729735239727,4504927454528866993,524288 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6552,i,5414901276304871329,1934133115724026875,262144 --field-trial-handle=2240,i,12925977821062818014,145846028654127457,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

414f023b-70eb-48ea-a160-df3d452982f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\414f023b-70eb-48ea-a160-df3d452982f0.tmp
Size 8KB
SHA256 e1d20eb28640bc7fc48edd94d3d60bd09bf9cfecab4ae06d6340c329c7cf037d
MD5 08eed056205ffe19357c97a94a25c9bd
SHA1 0ff281ee9b91c56f5a15718c7a4ba2fddaa5ada1
SHA512 cf4acd9a2e34d2e6c39a1414f31e7a9aa35accfb5f39440252644d3e49301725d4d7abd76d908c1b69eab17e977b6f9bd29ab94d9d950534a0ec13996a1a7b06
SSDEEP 192:BOND6JUm0QmiUya1aKso//gyweBCHw4U6:BOND6+mEJso//kDpU6
TLSH
T14702C735BC687CBB8EF3AE45B4877B239FA4107BA6911F84DAD82E1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44308b6e-135e-42b9-89ba-44e870dfd969.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\44308b6e-135e-42b9-89ba-44e870dfd969.tmp
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f7e901ff3df2d769334a9a6d3d1825c832dead150655a1e08b1ef005d0292c1c
MD5 54b5c89d12a534155a20824f377fc719
SHA1 633c3f7842f6f8f5fca6889975166d8beceab229
SHA512 232113d19f85e9404efda63cedba3028a48c801cab50f01744982526b2603d87acb2c9b209ffaa2266ed46e4496bd525b77408f425a951d529554a9790832746
TLSH
T118D0C06096B83ED9E131203F03700311348C01D351136100D85000490BE808381C1CE0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

06b7790d-4352-4df4-85b4-8466501f9cf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\06b7790d-4352-4df4-85b4-8466501f9cf2.tmp
Size 10KB
SHA256 cc49057b1e4ed7a9c3e6cc819bd0d1cba1f103303d62b40a73ca69f980082934
MD5 40cc79ebc952db5734a8f0f2cc53477c
SHA1 c6cbb6774e5d0b406713d87cb7fbf5553d1e961d
SHA512 3521a1f53624ab5ca77f40dc9a6bd8dab5724075349af884c68746ad2a24def7580e613c4af30add71d04df0969b4dae210000de3e18b9b24f8c6b490f856381
SSDEEP 192:sxZaJzRt0W9j/fdQs9m3a3EIdpdagHW6+WNGY36/xd5tnKIg54mJ:sxZ0b5/f+ssA9HbGXur
TLSH
T1C622C9116E38A9BB8CCBD61DBB15BF53E2F9503251911E98AAFC8A1C05E67DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

111b4ea6-ea99-46f9-970b-b7846351cfe0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\111b4ea6-ea99-46f9-970b-b7846351cfe0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

25ae0d5a-44d9-4714-a8b3-4afb381e35c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\25ae0d5a-44d9-4714-a8b3-4afb381e35c6.tmp
Size 10KB
SHA256 1ca921d3c243b29bfa325c0c9d6d316ea1beae0c24c39a9ce996bd2049281c53
MD5 1aa4a80bed35073b14437f8bc1450293
SHA1 ee0703fb4eafe3a59dbb0bc09395b5a0149fce7f
SHA512 fc4a5711a61a3ef2fb126daabf47e0828dbf6aa09aa2f84f43d5a61ac26f84d44bf75e2de98da8de3248166aed661e9dd59917b276310110c7f288cdc903fd5f
SSDEEP 192:sxZaJzRt0W9j/fdQs9m3a3EIdpHagHW6+WNGY36Gxd5tnKIg54mJ:sxZ0b5/f+ssAHHbGX/r
TLSH
T1DD22D9126E38A9BB8CC7D61DBA15BF53E2F9503251911EC8AAFC8A1C05E77DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ab77fab-1c9d-4a25-b127-fde0f3070e58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ab77fab-1c9d-4a25-b127-fde0f3070e58.tmp
Size 9KB
SHA256 4be0de1a143ed32a61a9e922006d30e5c84f03128045fb01ee5e4489eb5bb2f6
MD5 17617f5b7cbda4c3eacf654add64ee69
SHA1 8bb001543fc981924b68f6b75f4c93e191ccfa28
SHA512 3593197362c4db8f6d47a4afb4201b045fa952fc706f91913087639fe57f4cf3268af9100cb74117aee6efab03a583fa9be1c64ae45884a5032579274bb8ca97
SSDEEP 192:sxZaJzRt0W9j/fdQsea3EIdpdagHW6+WNGY36axd5tnKIgrJ:sxZ0b5/f+seA9HbGXb9
TLSH
T1EA22D8116E38A97B8CCBD21DBB25BF53E2F9503251D51E98AAFC861C05E66DD130B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c9f3a27-6965-43a5-852e-469578d6c077.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c9f3a27-6965-43a5-852e-469578d6c077.tmp
Size 10KB
SHA256 1ef29b52e37ccf6c84871b0eb68b713d3deee2c401d39da5ce4b0c3f2feb12ac
MD5 37b499a88de690411f663a5bbc29ef7f
SHA1 5cf1ee8971fe8a1eb01153b6346ae52805120ab1
SHA512 3687d1179b87fcb4b88a8690b90fb6772418fa5ef6a1fa8d90c9bcb3e04a0f5222d595966520a9bf584f247d49e73d09c07dedcb4a92d7a37e53e485f1d16615
SSDEEP 192:sxZaJzRt0W9j/fdQs9Pa3EIdpdagHW6+WNGY36axd5tnKIg54EJ:sxZ0b5/f+shA9HbGXbF
TLSH
T11122D8116E38A9BB8CCBD21DBB15BF53E2F9503251911ED8AAFC861C05E67DD120B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8d82d1f1da6358b6cd7118c3a879e0001d62c78f3d25877ce9340ab90c650d33
MD5 db38c65dd8786284c07a4cb67adf83d8
SHA1 97bb125d7f3906cbce68c5649e25317385da800b
SHA512 240c92b60006abe040b322fe0602501f8c2e0ad946c8b26f1b7795838e98a625addd46850828a926e6da216ea4fb38434613a799ed04dde9b9233883bafb0f4c
TLSH
T19FE020D906C4C61D550CB48701786B4CD390361FD3C4793D1711C544B846440E2975A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 4f6ae73331a6b2ba007ca21c6ce66e598a65f1654884e351fe2a8181205f93ed
MD5 ff2c5cbb75f99f8d2043b43ea526c307
SHA1 bd820024b2ae8c1aeb68f9a0750f2f3052f2dfd3
SHA512 d1af5364e60a544e85db8bf445181c1511a39b0be01eb089f4e90dfffa02de342bad922a758df8128bab807b726cd8058d332178c8209823824e8c49445ced97
TLSH
T1C6515170DE608098FF9941BA95D01DBB353677A024739F3B1DBCCAF859367D549C8046
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5512254ce8e3e4f258367b461f7122a496b8b8f35194bb056151be2e1a5c9aac
MD5 d1dd4aa155322371a918ab0dad8e8daa
SHA1 bc7d55c5843d821804bcc2794f14269cab93217d
SHA512 f07929fa7695d2bcd77a041c296608baaea78e5aabed9f99685f77f90dae55bb5da26b7df28d7c1c32c9fd540b8057b9ddfef5c4485b2abbcd768f5d8b549204
TLSH
T159515070DE6080A8FF9941BA99D01DBB363677A024739F3B1DBCCAF859367D949C8046
MD5 SHA1 SHA512 TLSH

Submit Download

008f8d2d-6735-4032-8271-256a816a5a07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\008f8d2d-6735-4032-8271-256a816a5a07.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8a5caff7-90f0-4b4d-a060-ec7a304cc113.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8a5caff7-90f0-4b4d-a060-ec7a304cc113.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c437c852-9d7f-4656-a70e-10f20ad05279.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c437c852-9d7f-4656-a70e-10f20ad05279.tmp
Size 949B
SHA256 0a2389dec07724582214ad5e0aaa55e9d59ccfd988ef96993521a737173ea5a4
MD5 69475a5953fff5e5073967ffdb9ad078
SHA1 016d920fbf43a2171acafba28e73bacfd0caaa07
SHA512 cd799a5b28f6f7f1dbf50ad750ad46f3d4dc281d477f775161c720bccd5d1c9f9ddecc1369c1635b122bf5a72c589b752cd00e569c5c94144fc55bc27acc7785
TLSH
T157117AF3C7D585AE891516F06A28AE2BCE2D0606821C7C1989D8EF6B97E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

cb22d650-91a6-4049-a22e-deb765784e6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cb22d650-91a6-4049-a22e-deb765784e6a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d6f36f58b7995e286615bf01cb22c7dcf1b366814e10a0609f5f5aa4306cd1ef
MD5 89f8a398bbde75628820e74cd3adf98b
SHA1 afb5c28403d890e59f4a1bc0054edffd40050df8
SHA512 dc91f3bfd9223b5d14282194a7383e2d0ebe4e0dcacb657f73171c2a3d83fccace04e883a22626661522865eee82458b76b23b37afe5e558cfa77f447d8c340a
SSDEEP 768:2cKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Zro1d:2cKlm7QWvUYe0u1ja8/L/E/S1d
TLSH
T125C2FA3B640CCB7E4FC05E9DDC5A6F9B6EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 969d4cd3a77f21755d064c4710304526e44dacef57b54ba2d04294827b83eb7f
MD5 e5fbf997b4261484c343760717b1109f
SHA1 2e206b7ecd35294f303a6c68b8b1c029df089881
SHA512 84104f4573543537c91d6ae779429522ece07ae334354a2016926d128b21cd974f91fca4e8b7f69bdb8ad0ddb53cd930c1c508acc9f8546bd038d1f19b28f4e8
SSDEEP 96:K8Y4KBm++HiKocL/2KQwGicgKZ++s1qWco:yfplFLm
TLSH
T17CC10C4130BB024438BE29889065976E52423173355CF9BBFFBE00A68A6FE545DFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8f5d72a-2d2e-4da6-b933-6eebaeff87d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8f5d72a-2d2e-4da6-b933-6eebaeff87d8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b4f8fb04-f180-497a-95c2-07df9943efdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b4f8fb04-f180-497a-95c2-07df9943efdf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0b3e252-5fca-410a-92a1-6368df8ab6bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0b3e252-5fca-410a-92a1-6368df8ab6bc.tmp
Size 18KB
SHA256 35177521ce2a00348a0259dc20e4f08c618d082b17f3c85c5212178c786b2f0f
MD5 7ec008857666b9a43fdb7b7ebc06f292
SHA1 f0c446811c56ee729c68ec494a722f24adc1104e
SHA512 0a115728b4ec5bdc77c566aa8d6f033d4a370edf2b901e59e0e57e1245b34e1461a9a65cf47956ceb1201d56143c62f638c6f11217f4fba3a43e144b59b35dc5
SSDEEP 384:1GZcIhsNjfnvbatmh//kXxYoFAtgOIwZOyAEdoh:1Uh6A2/cdAXsudm
TLSH
T166829D31ACB4ACBB1CF7A554F6877A039F788067A6C45FD4C5EDAB1D02E61A80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b40af7cb-3fbd-4e13-9685-c5ca08b5999a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b40af7cb-3fbd-4e13-9685-c5ca08b5999a.tmp
Size 8KB
SHA256 6697584cc040fad97f97f2bb0c0cbebf8cd8daeb29f564701889889f772ff6ad
MD5 1853db772863a7662686284232ecf895
SHA1 ff505fad8e610f23f93ede69083a6b0384b6e714
SHA512 98ea5507a8f5a965aad567f816be061d59dc457a667a3d3e2a791aef16eb089bf08f4873dc9537dd76f8ff6512cad63412fa7e703ffdeed1917c414fa0e07843
SSDEEP 192:BONwd6JUxYQmiUyaDaKMfo//gywXFnPwofNxHUqSU6:BONO6+CPyo//kXxYoDAU6
TLSH
T145120A35B864BC7B5DE3A994F08336139E644067EB846F84D9DC2F1C02DB1AC5307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7171aff-80ef-4b94-8d12-a2a9a9e7fa00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7171aff-80ef-4b94-8d12-a2a9a9e7fa00.tmp
Size 18KB
SHA256 7e26df5c2def9d1ddab4a117da82d0c1c0cd2b0b5f8a8b3df3c9bc447ce5ae1a
MD5 4896fa132940d4907b5fca82ce3b918f
SHA1 c234ce5283681b5cd7e75dd9991dee7d40300af7
SHA512 1dbf06a6983be35f41ce44476aaf65de60e563d73eac1826385c1b9be5e9c2564353f345e13c1028c68e5697da297b84a4c18095272059069f7f4c11c4eee820
SSDEEP 384:KGZcIhsNjmnvbatmh//kXxYoFAtgOIwZOyAEdoh:KUhtA2/cdAXsudm
TLSH
T12D829D32ACB4ACBA1CF79554F5877A039F788067A6C45FD4C5EDAB1D02EA1A80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1b7d849-eff0-4ec3-be2e-97a00304fad6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1b7d849-eff0-4ec3-be2e-97a00304fad6.tmp
Size 21KB
SHA256 9d15a17d4c081411592acfa2304f0cbf2f0e38618ffa0cb32bccc4138e243685
MD5 a4e14daf409895256a60e34e9c9928d0
SHA1 62d652350578f503423d4bc02f817bc7d88809cb
SHA512 a3d32e584feba73553be4ae070b53709a85371fa117d7b758c8c8e3a9b54542eac99ab2869121ccfc4db465091511f13f2bee114d933a201c6c18fc57473b207
SSDEEP 384:dEiFiZcI5zsN98TUNTUlIlfnvbatmh//kXxYojAtgOIwZOyAEdoh:dfFQ54wg1A2/cbAXsudm
TLSH
T1CDA27D339CA4DCBB6DFB9A84F68A76039F7440A7C5D5ABD0E6DD9A1D01E60E80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44186bac-c389-4b27-b1b5-9045e3b2d762.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\44186bac-c389-4b27-b1b5-9045e3b2d762.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 374854574dbf3b1efa2d94c112400d8fbdd51784a28d109c8a886a7662e64912
MD5 1b927a85c116a463a587c03a17112fc6
SHA1 f4d2a0a5916b139dc612d34d0d2844883a7e5494
SHA512 b4273bf4576b60d5cde42deca43f49323683b40d7b92a924736754c42be8f59f1f8fa088ec4a63de87ae446e5cf66fbddd44251f602c2b88636d274a172f711b
TLSH
T1B941D858B7FA1148B3B76E1A9BF7A86D847EB9671E0AD59E00110E4F0673B40C961B33
MD5 SHA1 SHA512 TLSH

Submit Download