6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-lnsl1i.htm
Size 34KB
Sample261002-e71kysveqg
SHA256 6ba372357efa26a04e1c8eb59f29e9867b04ed241c4665f06e78d1ebe6ab8e5b
MD5 764f5df3b8d286714635f98cdaff2174
SHA1 6f65b07d81db9dcfdfe1482f1ba7a14977d87aa2
SHA512 323c8e03eabf4884fba35ca5253c79f370c09e0156bea23ca0e2c10d948e608a65b47dc8cca9450afb3a81a9c61ccb77d3ff7acd935d3658b61c415597cf2e13
SSDEEP 768:9srfAOHdia5Qe2E4rY0H1UeH+NypaNKiA9b:9QAOHdl5TkY0HeNVKJ
TLSH
T1DFF2D65356D19D37067396F4BCB8BE2C95CA8D0FC248AC04743CA90C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3292	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{979E7CFB-60CA-4ECD-9B05-3A8C63988446}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 4424	5104	msedge.exe	85
PID 5104 wrote to memory of 4708	5104	msedge.exe	86
PID 5104 wrote to memory of 3292	5104	msedge.exe	87
PID 5104 wrote to memory of 4708	5104	msedge.exe	86
PID 5104 wrote to memory of 4708	5104	msedge.exe	86
PID 5104 wrote to memory of 4304	5104	msedge.exe	89
PID 5104 wrote to memory of 4304	5104	msedge.exe	89
PID 5104 wrote to memory of 1112	5104	msedge.exe	91
PID 5104 wrote to memory of 1472	5104	msedge.exe	90
PID 5104 wrote to memory of 1112	5104	msedge.exe	91
PID 5104 wrote to memory of 1112	5104	msedge.exe	91
PID 5104 wrote to memory of 1472	5104	msedge.exe	90
PID 5104 wrote to memory of 1472	5104	msedge.exe	90
PID 5104 wrote to memory of 1676	5104	msedge.exe	92
PID 5104 wrote to memory of 4544	5104	msedge.exe	93
PID 5104 wrote to memory of 4544	5104	msedge.exe	93
PID 5104 wrote to memory of 4544	5104	msedge.exe	93
PID 5104 wrote to memory of 1676	5104	msedge.exe	92
PID 5104 wrote to memory of 1676	5104	msedge.exe	92
PID 5104 wrote to memory of 3064	5104	msedge.exe	101
PID 5104 wrote to memory of 4504	5104	msedge.exe	102
PID 5104 wrote to memory of 3064	5104	msedge.exe	101
PID 5104 wrote to memory of 4504	5104	msedge.exe	102
PID 5104 wrote to memory of 3752	5104	msedge.exe	104
PID 5104 wrote to memory of 2588	5104	msedge.exe	118
PID 5104 wrote to memory of 2816	5104	msedge.exe	119
PID 5104 wrote to memory of 3148	5104	msedge.exe	120
PID 5104 wrote to memory of 3056	5104	msedge.exe	123
PID 5104 wrote to memory of 3056	5104	msedge.exe	123
PID 5104 wrote to memory of 4804	5104	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-lnsl1i.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe28f5c188,0x7ffe28f5c194,0x7ffe28f5c1a0
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,982820427019468931,2041036406056997357,262144 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,11212676048734930422,9287581006179138396,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,117798322662199419,13265740046808782313,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,5245768730813591027,13955833022508521216,2097152 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,16457439267655044716,10941422513823854965,2097152 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,14092530056418007877,4038977271025762702,2097152 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,7699948291178249768,16802204070874528232,2097152 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,10501583278415336390,5894085965713686135,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,16305542437340803555,3589602163258036584,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10341346911892619803,14583960949215540316,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10341346911892619803,14583960949215540316,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,17546836384609238158,11462526216087388100,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,9212196241541537986,6665563799878358963,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,17815361080858288930,12753445418654169477,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13266026683231168387,7477415948403876168,524288 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=744,i,10382886758696529683,12817673102659814911,262144 --field-trial-handle=2328,i,11622901943154112595,12186289259551459262,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

48ca3c61-4649-4c68-a09d-ad08c97af390.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\48ca3c61-4649-4c68-a09d-ad08c97af390.tmp
Size 21KB
SHA256 df1b07f56a09b6783f2598ef8258da23452dfd138951559c9e036641cf975bc7
MD5 23c06cd78eb1b7d12b6e773186fdd85d
SHA1 c625d9312aba646717af5383b5823e9f4aa7fe6a
SHA512 d5ce4a2f6e850a399eaeb2b510890e8a7ec3dd2365ef6155d559215a9f500b897dfe932930597f5ca0f683591c56bd006715f162c82c73c8080c8ac642d0770b
SSDEEP 384:ZiFiZcIUzsNc8TUNTUlIlJnbTGHqh//ma7c2tgOIwZOypvod:wFQohwgyHi/u12XsoW
TLSH
T109A27D7358A4D9BFADFB9A84F54632038FB450B7D5C5AF90E6DDAA1D019A0DC030BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d17664f-ba81-4e89-aa3f-cd1afb68372d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d17664f-ba81-4e89-aa3f-cd1afb68372d.tmp
Size 18KB
SHA256 e9ab4438e953c6367a6c90e1acb4eb0107ee8e30aa0b7f7caf1fd396257160cd
MD5 00e8bc0958b4c48e00bf2cc6cbb01479
SHA1 6b29ec0b76de728eb16a35380b8835654839b08c
SHA512 79df08ab66bc25c5913ec5e87094df501b5cc5ce97e68611ef26f7cf82dcf0e1bcc79bfa684069655da147059979ba935fa071db8de5c698015a4051c00423d8
SSDEEP 384:EZcIhsNUJnbTGHqh//ma7w2tgOIwZOypvod:ih4Hi/uX2XsoW
TLSH
T1A1828E326874ACBB5DEBE180F58776039F74906BE6C96F40D9DDAB1D01DA4A8030B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

17e43f6d-e3d2-4cff-94ae-0498f8aeba12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17e43f6d-e3d2-4cff-94ae-0498f8aeba12.tmp
Size 10KB
SHA256 dabb249e3f70d00437fd41400c70ad8a180323b41fd58dd6cee81e245ca63cd2
MD5 3e4e5b79a90ac0929d05d0bc2b69f58f
SHA1 83c561187a27e0b68c76759131cb9dcbac668f0e
SHA512 7c99171e3a90cb82b1ac08e607bf506d683d25e6a703c42ee04d18b16d4cf3956e26a8f93cf5c7590f252fa36d1dedffd989a5c332656411679308c16d09c9c7
SSDEEP 192:sxZnRTWV/f6sjbaIdpdyHW6+WNGY36acaIg5JJ:sxZnEV/f6sjbzgHbGXW1
TLSH
T14622C9126E38697B4CCBD20DBB15BF53E6F9503251D11E48AAFC861C05E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29710b2e-d9bb-44bc-8d35-80176da99523.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29710b2e-d9bb-44bc-8d35-80176da99523.tmp
Size 10KB
SHA256 8a4548a72b1265f463f3a8cc40ed785d65cfeba0110233537c6abdc577892993
MD5 335d2d71a3265e77f78b0c7aa91f6109
SHA1 09a7ea11a53096267fb0f31c0e1240ef0512b372
SHA512 cd0f4629e1dd02498f832b3da1d3c41f06984bca6fc4e70475d391025962a02bc83c1c84e8fc00802f27084e3c46fb58066e30f18449719fdd5e3e27039b7235
SSDEEP 192:sxZnRTWV/f6sjxaIdpdyHW6+WNGY36EcaIg5zJ:sxZnEV/f6sjxzgHbGXEb
TLSH
T1B922B8126E2869BB8CCBD209BA15BF53E6F9503291951E48A6FCC61C05E7BDD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50138d34-470a-477f-9aaa-f693308bac8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50138d34-470a-477f-9aaa-f693308bac8d.tmp
Size 9KB
SHA256 359e611550b515412aeb155b2d48896cae90a8b43986a23c1bfd9271ddf9fed0
MD5 b181ef75d63fe8ee0058b6721ee53861
SHA1 04e0277db412a7570c76d1d4da1759220ffcb890
SHA512 cf125843f8fdc0f0f0a0fdb3b34b71a3f0f962f2ebd177fceba53487d63bb4b21a794a0011d45f3b473e7bbcc26bd99b9f997aa9a68a6a993f54171e3ca15f2c
SSDEEP 192:sxZnRTWV/f6smbaIdpdyHW6+WNGY36acaIgrJ:sxZnEV/f6smbzgHbGXW9
TLSH
T1DB22B8126E34657B4CCBD20DBA25BF53E6F9503251D51E58AAFCC61C05E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54e3f1a2-f3fa-4fa7-ac8e-e2a3fa3daeb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54e3f1a2-f3fa-4fa7-ac8e-e2a3fa3daeb2.tmp
Size 10KB
SHA256 990421cd1cdbf09011dbf184d5c17767f95c46b06c30cd5fb5dc344de06c2741
MD5 d70b828c5d0bcd410e5c94a03206d41a
SHA1 b343128d8cd57840e66bf598ea01715fa1f3e244
SHA512 1a8bbcd4519c7c97facf007fbc1d04e07f5cab66326ac188b3b4180a4e468d074c8b73a0fc54d675fea463f5d67b74d8eb6dabad62cc26a0864fd5a37561853e
SSDEEP 192:sxZnRTWV/f6sjxaIdpHyHW6+WNGY362caIg5zJ:sxZnEV/f6sjxzSHbGXyb
TLSH
T1BF22C9126E3869BB8CCBD20DBA15BF53E6F9503251911E48A6FCC61C05E7BDD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c96f351-1610-4da7-af86-ddbc6e361fd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c96f351-1610-4da7-af86-ddbc6e361fd5.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 4b2a1b4bea169045f803295c8a972cbf3fb13371f7265d4611638d4d5b6d56b8
MD5 fe82caa85419cb984397f54549806635
SHA1 15bb2861150b393a2c7451bad4891958a937a8cc
SHA512 ce10af33bc1bdff8ecc484d86deaaca3aa5797ca111759ab3aef9dc7331d9dc81b264f0337adb584d10266cc7221f12eb39b53862f7673e7487d7a3e31c273fe
TLSH
T1235191C0A584C161CBA854F086D126A337377A7BE9C3DE830E48D9BEDB4A736D0020DE
MD5 SHA1 SHA512 TLSH

Submit Download

5af3ee83-d9da-472f-8c96-2da591bec652.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5af3ee83-d9da-472f-8c96-2da591bec652.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7dd3e4e6-c34e-4c25-89e0-9003b2d65e03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7dd3e4e6-c34e-4c25-89e0-9003b2d65e03.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fc81f95d-3153-415a-89e1-ef1a18b217b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fc81f95d-3153-415a-89e1-ef1a18b217b1.tmp
Size 949B
SHA256 0392f4c8e00fea63d7c94caa107b8e4a6e65f2c316ba44973b8ff19eaa7060ac
MD5 6203399e036aabb59c5d58ffa5a8774c
SHA1 a8ffd9191951d1ca3bc5e4a8e080f35758505e9a
SHA512 11070118fdaec39dfe3e200cfc19e4336b149eb2be8e84cb277f461d28a749995c52cd30e3e795128ba72cdb7257965d90491ac0a603e3705491f8e61fbc5b4d
TLSH
T129117DF3C3E585AE891556F05B24EE1BCE1D0606421C7D1989D4EF2B93E3075E00199B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 766e67296cd1eb4b963ecb6546640519e4fa1608dae760ccb8aee05298316b55
MD5 718be96344764f13aa3235d11307e563
SHA1 1b81c502751da010529c8364edfcbd1710fa4b10
SHA512 8731bbc3513216b69240a0f7fdb15508a02ee35e1463c183a4e0e0a30c1b8c2a63bb8774efd7a8b1269b9dbe08c766415df0eaab5c1a583153267a418879a161
SSDEEP 96:KE6kKbqCeDyKcENRwtB3rvk/r+PN5kKVBNPkphBe3h5d:CH5Lnd
TLSH
T11991775174AB022038BE755C44E5A72B124532B33119E53F7FBE52A24E6EE448EFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4aeb8bf-3e07-49bb-ab20-636a6a979d03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e4aeb8bf-3e07-49bb-ab20-636a6a979d03.tmp
Size 27KB
SHA256 12279c8cff1a940e38d32507a3908108ddafa35c5cd79feb0f5c5a5eff946f2b
MD5 c54b40d8a9ddfccf043ff1d970acd886
SHA1 ea99583afde6aec8159c1d6a414569569dd53f2d
SHA512 2bafbe2480067b45c24bd3252a96883be77eb521dec072050626ad5154218dce8ca4aa4acb553ea2d208dbd96932a2503f2a8cc3de4632d94617f52a4cc5a8f0
SSDEEP 768:cKKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/vroya:cKKlm7QWvUYe0u1ja8/L/E/8ya
TLSH
T1C0C2FB3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0ab6ca2-bb64-4441-93a3-7693a5d0f34f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0ab6ca2-bb64-4441-93a3-7693a5d0f34f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ecefe6e-e42a-43bf-a7dd-a534226ef9de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2ecefe6e-e42a-43bf-a7dd-a534226ef9de.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c564cbfa-7d09-4bd2-810a-69ad563ea3ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c564cbfa-7d09-4bd2-810a-69ad563ea3ff.tmp
Size 8KB
SHA256 af3449a62be13a57c163a590906e30ab1b2cb301b19eb64609b0453140cd6a6b
MD5 54514dca2432ab56d21a240de714dab6
SHA1 aca41bac4a2fa8ecaf4e0f4972ae0c211fdffe16
SHA512 af114a36baf51661a108b45d31199063e65f88f302c635a5cc3bcef6a09f1e56bca1c5866755ec212647521d779826991cde212b42e3342e355f1afef61c5cc8
SSDEEP 192:BONt6JUkQmiUyVgH2o//ZsPC7nQezYNxLq1U6:BONt6+05H2o//ma7C2U6
TLSH
T1A7121A357868BCBB5DE3A995F48336139E744167DB896F80DADC2B1C01EF19C530B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d74b6b43-1981-42e1-bc4f-16a5e7f36139.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d74b6b43-1981-42e1-bc4f-16a5e7f36139.tmp
Size 18KB
SHA256 fe97642e964297dd2bff278fd45ff0b5a93bf6d8868256d2111f23777f6b6270
MD5 fcfdcc2fe097014a48e1e20deba15876
SHA1 a3b07f48c0ac39d69514a8f1f610fd1dadc936ea
SHA512 4bb01d857487f12a8efd2a8a3a85ba3db7df9f3396f7c071084be411704c4897b4fa0cd5c9ea5e3cab4a5b8098825d4e32675e81553ae6e296306f09d661e99f
SSDEEP 384:xZcIhsNUUnbTGHqh//ma7w2tgOIwZOypvod:ZhHHi/uX2XsoW
TLSH
T16B828E326878ACBB6DFBE180F58776039F74906BD6C56F40D9DDAB1D01DA4A8130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58dcd3af-4b37-40c7-a0c6-316e6ccea4ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\58dcd3af-4b37-40c7-a0c6-316e6ccea4ad.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1f3c1ae-94ff-45de-b761-6bd9454f97d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1f3c1ae-94ff-45de-b761-6bd9454f97d4.tmp
Size 8KB
SHA256 b90d22026d7022a21eed3dabaf44684719c2cdad579ae28808c6ae76117c09c3
MD5 42db4c6039e72de909cc0839a972691b
SHA1 84cbccc9f8467e755c5bd6e98eca8d2edeeb834a
SHA512 7d7a494b6f5b995df37ef9cd465f05231ebaa85d0d041d435ec8517bf434aae010da1701faa47ff152c7474e445daa27bffa9c8a453d5a27239279335a1a9152
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5ZsaDZCBKP4v+Y1xf//ojdexVeYrMo:BONJ6JUm0QmiUyTgso//ZsPC7dBCN+U6
TLSH
T16202D839AC68BCBB8EE3AE45F44777239FA4106BD6951F44DAD85E1D01D715C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4b5e65da95b8d501be4fa216775a6ef04e4bb607253f2d681ebdc57adccc6203
MD5 a325518973d085477319586e5af4a3b4
SHA1 a74a80d99f4b27b83579b6936458fbd78bb9d007
SHA512 f470f53b482e80dfd989d4d1836a3562fb36f4609d226a7fa03775aeff2bc24aa8c8b218a3ff3eb5468d2d273325fddc8e3eef9b50c319e86208f0eacd05abfd
TLSH
T15741F998A6ED1148B3B77F5A9BF6A46D487BB9372E06C46E00110D4E0663E40CD71B37
MD5 SHA1 SHA512 TLSH

Submit Download