af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-94gb0r.html
Size 214KB
Sample261002-e7d2ysxze1
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{B83B04A4-A05C-41D4-B371-618D4A8E0473}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 3960	4412	msedge.exe	88
PID 4412 wrote to memory of 2620	4412	msedge.exe	89
PID 4412 wrote to memory of 4952	4412	msedge.exe	91
PID 4412 wrote to memory of 4952	4412	msedge.exe	91
PID 4412 wrote to memory of 4952	4412	msedge.exe	91
PID 4412 wrote to memory of 3124	4412	msedge.exe	92
PID 4412 wrote to memory of 3124	4412	msedge.exe	92
PID 4412 wrote to memory of 216	4412	msedge.exe	93
PID 4412 wrote to memory of 216	4412	msedge.exe	93
PID 4412 wrote to memory of 228	4412	msedge.exe	94
PID 4412 wrote to memory of 216	4412	msedge.exe	93
PID 4412 wrote to memory of 228	4412	msedge.exe	94
PID 4412 wrote to memory of 228	4412	msedge.exe	94
PID 4412 wrote to memory of 3412	4412	msedge.exe	95
PID 4412 wrote to memory of 3412	4412	msedge.exe	95
PID 4412 wrote to memory of 3412	4412	msedge.exe	95
PID 4412 wrote to memory of 64	4412	msedge.exe	96
PID 4412 wrote to memory of 64	4412	msedge.exe	96
PID 4412 wrote to memory of 64	4412	msedge.exe	96
PID 4412 wrote to memory of 1672	4412	msedge.exe	100
PID 4412 wrote to memory of 3820	4412	msedge.exe	101
PID 4412 wrote to memory of 1672	4412	msedge.exe	100
PID 4412 wrote to memory of 3820	4412	msedge.exe	101
PID 4412 wrote to memory of 4804	4412	msedge.exe	103
PID 4412 wrote to memory of 1856	4412	msedge.exe	114
PID 4412 wrote to memory of 1364	4412	msedge.exe	115
PID 4412 wrote to memory of 3860	4412	msedge.exe	116
PID 4412 wrote to memory of 3588	4412	msedge.exe	123
PID 4412 wrote to memory of 3588	4412	msedge.exe	123
PID 4412 wrote to memory of 1636	4412	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-94gb0r.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7fffa090c188,0x7fffa090c194,0x7fffa090c1a0
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,17308279481234759667,13858682190064091356,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,16932104722487495912,10644499328429738981,262144 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,12822875714481337170,6769268414439247450,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3384,i,9407756530594753213,14507169681982360742,2097152 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3392,i,2147681396000236672,16978824789987613176,2097152 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,7379945134247224592,5245443197591938125,2097152 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,5543917628059682022,502543469594305230,2097152 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,15350038759674899038,12596256232404684325,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,11253666996857636206,4264184067110144215,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,4813180384443670676,6579721620649394394,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,4813180384443670676,6579721620649394394,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,8505442136456484683,5713411508693018230,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,13766066253787206581,15801971243916590911,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,1071367859959973918,5250787050200588249,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,14268442115799991071,1659997792412965698,524288 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,5801718271109368751,7622078339750283953,262144 --field-trial-handle=2160,i,17197006648939627974,12092573286211134659,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

031ccf0d-3fd5-4adf-9a27-8f45bdaf4dbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\031ccf0d-3fd5-4adf-9a27-8f45bdaf4dbe.tmp
Size 8KB
SHA256 9bd908c1610c7eb2fcb1e43e2c66205d9cbdd50f0c7cd4e20db315ffc7c0f767
MD5 ece4f1d3cbf079650af7addb97d73e16
SHA1 818c8d9b1db938b0db7daa4971ccda8d2d9a4487
SHA512 035c186b2345edda3be4692c3d5f5edbdc9ae561b10b180fb643be6403e4ea94ce549d191ada8147040aaa78c4a375f486277e8d9aa5a8af7a9376b9dae76c12
SSDEEP 96:PqONkwQsjpfwDISp5ih/cIPURHl8h4otop50mDDBfPGxvw45RxmJm78lFOxVeYuL:SONU6iDCQmiUyHdHq5u88PN0SqHBxsU6
TLSH
T10802F839AC787CBB9DE3AD15B5473B175FA8113BE7941F84DAE81A2C01D768C1307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47ba4ce3-5b89-4372-9b6a-57b5ec941a26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47ba4ce3-5b89-4372-9b6a-57b5ec941a26.tmp
Size 18KB
SHA256 b477300e3637b3a19bdc547200f0bf9e7c0d4ca6b75dda885e36ece8ac05c0d1
MD5 2e2888794a538967e3689df9a29b3fd6
SHA1 56b5dba7406193d689df72449daa65bd50f359b5
SHA512 eef17ff54a76c21826c0e705b8dee8b30a94e88a23debdaf4da8dbed6f93ff56beec383acc53e9a4ad5897cdd392ad8a14dad4899d698e6b202565da0d6cc780
SSDEEP 384:6ZcIhsNMzDEhXIb0Ndp5u8iNLAwtgOIwZOyOeol:4hoJkOwXsMW
TLSH
T1DB826C7268786CBB6CEAD154F54736039FB8506BE3C8AF84D5EDA72C01EA598030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f76fa86-d99f-468e-85d9-45a4c45f7eb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f76fa86-d99f-468e-85d9-45a4c45f7eb3.tmp
Size 8KB
SHA256 2a4e0d1072cdcf527d47917bc7039ea1a35e85284f8974b1190af31785ecdda1
MD5 287adf25dcc28ee91c6b03be89aace7c
SHA1 e8472bdb40da7835e15ce7a6ebea94fc15795244
SHA512 7967e760463638d9995c4e53817ccb1481b4469d36d7b803f39a97fe2f40903f2bd73a3b7c431b9e95a4c0294bc56eebb5a8b86abe769f4ca100c50a625e9acc
SSDEEP 192:SON96iD9QmiUyHd/q5u88PNLbetPuZ3qLU6:SON96Cm/q5u8iNLVwU6
TLSH
T1C3120936B868BC7B6DA3A855B44736139FA8516BE7886F84D5DC2B2C02EF598130B413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a45f1c0-c849-410f-b271-13a061bbad48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a45f1c0-c849-410f-b271-13a061bbad48.tmp
Size 18KB
SHA256 8ea2916e88ef027901d0e81fd4ffdaad9aff14f111676eef2d0910f024d2db14
MD5 aadc8db8eb698af2734f57d90378b5f9
SHA1 ebce97ff95864aa3cd1674a32ab0823b62a5dd9f
SHA512 a98e3ae1c425fd0269a38fe2d70708c1efc9b2133e350459982a14ad5868d06a36cc00f56c66fbcb4902d7af5b828f8a2710d660f7159d3c17d13f03e4a98a4a
SSDEEP 384:zZcIhsNMGDEhXIb0Ndp5u8iNLAwtgOIwZOyOeol:rhdJkOwXsMW
TLSH
T176827C366C786CBB6CEAD154F44736039FB8506BE7C8AF84D5EDA72C01EA598030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

266ab352-4372-4084-865f-5041e7d67436.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\266ab352-4372-4084-865f-5041e7d67436.tmp
Size 10KB
SHA256 eaa2e314b76c69a9e5f549ea319d9f7c18a538ec97568d7d3839b0e1fd06b19c
MD5 f6fa400901f2e2feff59884e8504f909
SHA1 93a7fd3d96c291331e6db1ac899f865cc1c8422e
SHA512 456c3772a765cbc09b6feb0cd7ca0ba84eafd7ae7e9939729287ab8595eda5e93c54aca7f419b4342fc0cb23fc122cb8cc5b7285837704316997d22567dcb6c8
SSDEEP 192:sxZbRyWs/f5sy0dIdpd8HW6+WNGYa7vEIg5MJ:sxZbPs/f5sy0eeHbGEe
TLSH
T11C22C7526E28A97B8CCBD20DBB15BF53E6F9503291951E4CAAFC861C05E7BCD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86fd61c6-18f8-4af1-a76a-a45af91582e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86fd61c6-18f8-4af1-a76a-a45af91582e2.tmp
Size 27KB
SHA256 a5a3230a953dd5d0739fed7e787dc7f803c041ffa2bff9d373082b4ee9922709
MD5 cdae02b2898a1842f7059b3a5e66fd5a
SHA1 53583a3a7043a38878c22cb26a3f18fd36f6c028
SHA512 1cbf4e5352be64cd24a230590b1601e147ae51fa9e5ffd5ec61df674caa54a8692b2976b0e86740e70912899c57df4935f703602aa76877af90e844f9855b970
SSDEEP 768:3gyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3krorZzu:3gyQRbrWvvlpZu1jaXKLf33vrZzu
TLSH
T156C2E92B640CCB7E4FC01E9DDC6A6F976E9802C7A6588D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88ddc65d-d222-46cb-8533-88d72126fa2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88ddc65d-d222-46cb-8533-88d72126fa2a.tmp
Size 10KB
SHA256 8a9d77a20a98f18550c7779dc00419c27a5cfcb2cc12b468dbae12868e888cb2
MD5 d30cb32be59319a75b27955d45ca8b31
SHA1 5aaa8c605b3ac645b5b2416a54eadff22962f49f
SHA512 dc89862181f451d67045a1d3d5b9b28bf36e50791456c26e7d81a8c193a47ae212aed020e559688d5b5e207f1ed939a6898072d63d911d3f9d3994c97c6615b1
SSDEEP 192:sxZbRyWs/f5sy0dIdpH8HW6+WNGYaFvEIg5MJ:sxZbPs/f5sy0ecHbGae
TLSH
T1C222C8526E28697B8CCBD20DBB15BF53E6F9503291941E4CAAFC861C05E7ADD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8df2bcb7-cce6-4297-8184-f9116994e6a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8df2bcb7-cce6-4297-8184-f9116994e6a5.tmp
Size 9KB
SHA256 3e6908cf482eaaf2b6f01ed11b2ee853c34286fa3501a9ae0e241cfc0a6adedc
MD5 537bbbfa5efcc0bb0d6078529eeb6eb7
SHA1 668125d6c81e9a27a9c5b06664d9d1f35c5719b4
SHA512 8cb9642945cf129e904a51342b47b6e27b08edaa023d11d4505dbf59079a2b18619e809c2c2c22b5292bdfb8fc3c2d499a3888e1f19123aa313c8097f941ca1f
SSDEEP 192:sxZbRyWs/f5sf0dIdpd8HW6+WNGYaQvEIg5mJ:sxZbPs/f5sf0eeHbGB0
TLSH
T10822B7526E28A97B8CCBD20DBB15BF53E6F9503291D41E4CAAFC861C05E7ADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b1ca37563992694e6e5c4c607a7ec38196de3908d0e57b592e4de58b9a0d9caf
MD5 de89647df8fcf1c5645464c1ec333ee5
SHA1 ad5aeb5b03ed5a4716c3888a03044b1d4968bd0c
SHA512 4b15bdfb7fe2033e7dc1a1284fae33ff5fbb0b40e20fbb61ec16fd7783318b7d99ca1290ff290742883767ffed643d1aa5bf940714676ce3b21afcd77ef3585d
TLSH
T1DB61B74591A00F5BFF98403992F672BF3674A88288C3DD6E30A9F8795D5674863DCC1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2a57c181d55cc3d5959556bd5f83c9b210d70bc214576ca209d243e35d56f175
MD5 70ca713239fb85d8562f003e93908b84
SHA1 2545e4e3d0d577dceb48a0f1a468f1e311e452b4
SHA512 406730d67cdd8db02120033f0455d6df1e67af17c5e952782022fc1faacc5f8a275ccb25a6ba38470f1852763bb8db19d6308557bb2a44786b39372ae4809789
TLSH
T1C061F94595A00F5BFF98003892F672BF3674A88288C3DD6E30A9F8795D5674863DCC0C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1ecd741b-bd7b-49a4-9cf6-f9ef54983362.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1ecd741b-bd7b-49a4-9cf6-f9ef54983362.tmp
Size 949B
SHA256 783223285279192c71e092a600b424ab02ba9003eba1f2d71abe45210a92ee1f
MD5 c2c3a33ebf7bfcec9c4d4ceb43c081af
SHA1 1e56bd356cd4c7aaf456432395ba031c3433ea6c
SHA512 9fe21001f0fcdd538baea8c8ce90b0515202a31b9f829bb0b122cba826d6ae24f25c997efbddc9d9c43d5d85aaec47bc3e7f06d815f942e47d7553c1300a530c
TLSH
T1E3117DF3C3D595AE8A1556F09A24AE2BCE2D0606421C7C19C9D4EF6793E3475E00299F
MD5 SHA1 SHA512 TLSH

Submit Download

6e1a3098-86cc-4618-ae15-56530ca7fdb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6e1a3098-86cc-4618-ae15-56530ca7fdb6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b36ae9f9-2b2f-4cd0-8bae-5a40b525437c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b36ae9f9-2b2f-4cd0-8bae-5a40b525437c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 74ffe77c2e6ddfdddf5fef21a130cbd8ed47d0e23622980848ed9cf2d139bc65
MD5 edf64337e862e57f4aacb55328b770f6
SHA1 7452dc70cbda672d987467c8592258628898047b
SHA512 3dc12854fbd770e275c073971e88d846394a5b70c5dfece288c713405231a09fb378c71ae2fca74f82e60efbc045901b94a916ed493049ddea12ccfd0f697a81
SSDEEP 48:K0Nsh9P7/gbTmzIS1gK911XgxlwY23ttyL6lI064I5bkjUISoZIBKyUULyPnIrHp:KkyAKvqe2dOZSKyUqqgQKF/
TLSH
T18991546034AB8220397F295D40E89A6A425131B37224F53F7FB849634E6FE114EFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa3fd6b4-54ae-4c3c-86dc-f74ecd31030d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa3fd6b4-54ae-4c3c-86dc-f74ecd31030d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc8168a0-a4d3-423a-a701-25383debacaa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc8168a0-a4d3-423a-a701-25383debacaa.tmp
Size 9KB
SHA256 feec6918e7c295710871cc270b758ddd8aee8c4c8a385d80086778843c277210
MD5 966a89a5dde9deee9f9709ff1e13c605
SHA1 e92e6e938184b835f4cf6b96ead36470f62a78d9
SHA512 716b901f5b6769859ec70351cc80f0d64a5d214dd655ba9b4aa396c56a5cdd7ed1552b13d401885168b11f0ee6dd3cd06eb311009862968a0e2b40ece20071e8
SSDEEP 192:sxZbRyWs/f5sO0dIdpd8HW6+WNGYaQvEIgrJ:sxZbPs/f5sO0eeHbGB9
TLSH
T1C012B8526E28A97B8CCBD20DBB25BF53D6F9503291941E4CEAFC861C05E7ADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b9c41b87-7f6c-43c9-bb6c-e19997ed2d78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b9c41b87-7f6c-43c9-bb6c-e19997ed2d78.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af732e11-2928-4c92-a915-3ecd33955292.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af732e11-2928-4c92-a915-3ecd33955292.tmp
Size 21KB
SHA256 037156f27dddf99115f739c35911842f772f8173161c249b27931b1aff521c6b
MD5 f7e1f0a4827da7f5a615ed52a2e397f6
SHA1 f4f49fceb7e838aaeca17ceb3faca88591320e22
SHA512 5a471ba2e37f30a6858d6ff781226a81c8c2ae0023b4ff69e6003084e500b73c6fd750c0d9ee941a3c7375c9baedb0d594dda79781d13efb876802562b908e34
SSDEEP 384:siFiZcIWzsNE8TUNTUlIlzDEhXIb0Ndp5u8iNLVwtgOIwZOyOeol:XFQmNwgaJkjwXsMW
TLSH
T14AA26C335CA89DBFADFA9A54F94632038FB4516BD6C5AB84E6DD9B1C019A0D8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46b8265f-0ddc-45b9-aafb-1a318c8d527d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46b8265f-0ddc-45b9-aafb-1a318c8d527d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ddd697249a8604ff1475b70d6745f19a15de074e46cb7450dcef2d3f2d979a84
MD5 e7791b6f9b673d02d98966a176fb1640
SHA1 cd20e04aa632e44ce2b9a7e708370a788eb37870
SHA512 5889a442ed63e564874ee84fcaa1dfab01b41c77101df9ae2c1c8d0c2139f1ed5f9ad7f9f25bcaacdb248e97dc2cf73cfc06382308607bcd8ff075a71a70e7ee
TLSH
T17B413B5CAAF91158B3B36F5A9BF6A86D487FBD332E46D49D00010D4F4A62B00D971B37
MD5 SHA1 SHA512 TLSH

Submit Download