c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-ujijza.htm
Size 34KB
Sample261002-e7rm2sx1bx
SHA256 c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d
MD5 966cbc85dbef6cabdbdc9c7e5496cc81
SHA1 a975b1e21c10dd0dc8fa0dc9ecc3984ca1aaf500
SHA512 4385a6988471168604246748dec63ed3bcfeecaffa1948583072d992edad73d6943a08af0c354e6fcfc007425da662357166b6909fa654e104b78c0e97c38a71
SSDEEP 768:3srOAOH3uia5QeAE4rYyH1UeH+NypaNJiA9Ky:39AOH+l51kYyHeNVJAy
TLSH
T15AF2E65356D19D37066392F5FCB8BD2C95CA8D0FC248AC04743CAA0C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1508	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{98CBF685-42C3-4297-B19A-9FD036DED782}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1320	msedge.exe
1320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4524 wrote to memory of 5096	4524	msedge.exe	86
PID 4524 wrote to memory of 1508	4524	msedge.exe	89
PID 4524 wrote to memory of 3892	4524	msedge.exe	90
PID 4524 wrote to memory of 3892	4524	msedge.exe	90
PID 4524 wrote to memory of 3892	4524	msedge.exe	90
PID 4524 wrote to memory of 860	4524	msedge.exe	91
PID 4524 wrote to memory of 860	4524	msedge.exe	91
PID 4524 wrote to memory of 4576	4524	msedge.exe	92
PID 4524 wrote to memory of 4576	4524	msedge.exe	92
PID 4524 wrote to memory of 4576	4524	msedge.exe	92
PID 4524 wrote to memory of 4868	4524	msedge.exe	93
PID 4524 wrote to memory of 4868	4524	msedge.exe	93
PID 4524 wrote to memory of 4868	4524	msedge.exe	93
PID 4524 wrote to memory of 2328	4524	msedge.exe	94
PID 4524 wrote to memory of 2328	4524	msedge.exe	94
PID 4524 wrote to memory of 2328	4524	msedge.exe	94
PID 4524 wrote to memory of 100	4524	msedge.exe	95
PID 4524 wrote to memory of 100	4524	msedge.exe	95
PID 4524 wrote to memory of 100	4524	msedge.exe	95
PID 4524 wrote to memory of 3396	4524	msedge.exe	99
PID 4524 wrote to memory of 4316	4524	msedge.exe	100
PID 4524 wrote to memory of 3396	4524	msedge.exe	99
PID 4524 wrote to memory of 4316	4524	msedge.exe	100
PID 4524 wrote to memory of 2572	4524	msedge.exe	102
PID 4524 wrote to memory of 436	4524	msedge.exe	111
PID 4524 wrote to memory of 3412	4524	msedge.exe	112
PID 4524 wrote to memory of 1552	4524	msedge.exe	113
PID 4524 wrote to memory of 4336	4524	msedge.exe	121
PID 4524 wrote to memory of 4336	4524	msedge.exe	121
PID 4524 wrote to memory of 1788	4524	msedge.exe	122
PID 4524 wrote to memory of 1788	4524	msedge.exe	122
PID 4524 wrote to memory of 948	4524	msedge.exe	124
PID 4524 wrote to memory of 948	4524	msedge.exe	124
PID 4524 wrote to memory of 1320	4524	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-ujijza.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff865edc188,0x7ff865edc194,0x7ff865edc1a0
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,575107780285693725,7976523269407345206,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,5412673034833694107,14850065343294464975,262144 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,17090458231579094503,2435472578561414267,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,3014855574709766108,3071123942509107924,2097152 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,17074824903451731401,3240449216298357666,2097152 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,17861728699379722139,6229720137067468155,2097152 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,2598368338086136580,3760566278577082927,2097152 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,4183406992270083680,4054694727581012603,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,15192104510270030082,11143223954709205826,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,15171365994935924493,16333511655990474502,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,15171365994935924493,16333511655990474502,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,12444439071941565796,13510454870174396360,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,16278735746511892114,11292891165916297035,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,13031310552597161,17989460591202249253,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,12087549100115599180,8094352675672268093,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,2203621753274511481,14445049891135296305,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,13189314823147940493,8763335771789834375,524288 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5840,i,5609195816438048542,3426309645711868708,262144 --field-trial-handle=2420,i,11148591099202102590,5998608178679135187,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1320

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

42e9edae-44e9-425c-a88c-47bb97af7d30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\42e9edae-44e9-425c-a88c-47bb97af7d30.tmp
Size 21KB
SHA256 4708ecc8e546d90256652484311173fe40dc4d5db1cfdb91304e9e1dadf21ec7
MD5 c1b542714f0438c7fa880056cd1276a0
SHA1 b8b6acb19ae3312fb49f4550dcab671b13a2f28c
SHA512 6bda43f3aa5916f2ba67f6c4e131a904721d48bb08e504c4b57588042bd16a18b59a184be916092d78f55846674f6bb034560491170418695c48a7348756c4c2
SSDEEP 384:nAaiFiZcIJzsNw8TUNTUlIlMFwUbPzeh//GJ8etgOIwZOyConBoo:ncFQp1wgmw++/3eXsiBz
TLSH
T19CA26C3398A4987FADFB9A84F54B36039FB44067DAC5AA90E7DD6A1D01DB1D8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

18ad9ae4-f6d6-46d2-b2df-89d906daf163.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18ad9ae4-f6d6-46d2-b2df-89d906daf163.tmp
Size 10KB
SHA256 40070fbd38bdf954f4e83afddb3df56fb8491215c9d4d80400577211b92dbc2f
MD5 a4ede2b14597b7cbd8e9461d8ce2d2f7
SHA1 14b0a16a2eb8c0a944ae310d7ad8169b785b46e2
SHA512 4265567e00a1800cea3cf9a4f23fccaee3d13761485364fca84b13d6c01d284da28fe2e3cb3636571765787aff6f76cda1ea8700b037d4b2bc9a1a295f1f256c
SSDEEP 192:sxZERwWu/f2s/FIdpdgHW6+WNGY362riIg5YJ:sxZENu/f2s/22HbGXXm
TLSH
T13722C7126E2869BB8CCBD209BA15BF53E6F9503251901E58ABFCC61C05E7ACD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21ddba81-ab5a-4d85-81ca-52e54088f35a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21ddba81-ab5a-4d85-81ca-52e54088f35a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3d8a7bd3-cb87-43a1-a2d8-8477b5b20a73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d8a7bd3-cb87-43a1-a2d8-8477b5b20a73.tmp
Size 10KB
SHA256 85654e96c693bcf14a908edff915ee52d683b60ec30a13cd1d209da0f76b0217
MD5 1dd5cb4e1144d71237732bc13c33c203
SHA1 9dba0bdae0a32f0548350f0b7c21f0e643a6be83
SHA512 0a58f0033c55cbb7f1f3d7be789483960d93d84c1b4dc40e0ac2d09ab0136bd8b4ca0d92eb146c4bd700b7f4bec6b8312ae1d12d1e9a8cc767067251d15d99d7
SSDEEP 192:sxZERwWu/f2s5FIdpdgHW6+WNGY36ariIg5yJ:sxZENu/f2s522HbGXjs
TLSH
T10622B7126E38697B8CCBD20DBB15BF53E6F9503251D01E58AAFC961C05E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5788b41c-961b-46b6-9d88-f1da52a947da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5788b41c-961b-46b6-9d88-f1da52a947da.tmp
Size 10KB
SHA256 0e7f265da58927beb650913fa6201548cd50df296fbd8673d970d916926f8253
MD5 b0c2e7bb04dbe2140e0cfd0916c137c1
SHA1 d1e8b7721599c49029c1eafbd20cb5c140679d09
SHA512 ad09c07492a2bf3cdbae5803bc7818f31e204d6ca3dc9f3bf0fa8aad830e57dbedf3553dcc63ba89439d4371d93c59515574d43fc70588d7389ac1bdebcb6d4b
SSDEEP 192:sxZERwWu/f2s/FIdpHgHW6+WNGY36/riIg5YJ:sxZENu/f2s/2AHbGXOm
TLSH
T13C22C7126E3869BB8CCBD24DBA15BF53E6F9503251901E58ABFCCA1C05E7ADD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0bf05767922207c8c7e9b0f14dc8e48f9a78569eb93d69e3a69e2f62bff0906f
MD5 74a9f9d59a2796b326abc2d795128013
SHA1 2dd6cf61dc855b57172e86c4d6bc36ff5baea57d
SHA512 812b13ed7dea057a53fd5a6f6c0eeec6c31671b179217b2a66689f2142b73b26b76159cae100d0e4a7918698167504fbb9a1567e93c6d33588fd3b210d81ec41
TLSH
T154E078F409C5C29DA314654701FC434C93B13F1BD3C4A91D7704DE48754505472C5960
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 64dd3179497d429c341425f4a9ca22d4e0b1c2a8ae1a259b435780d116e10670
MD5 323e399a6840abdd805bb46ee8f75551
SHA1 3fafabebda7e10a26dc2bcb7d263abf884e8bde3
SHA512 30b9af26df378f8039bc5a69af4b7ae2e1cff0e9d7fcf0ceb09581b30f0ee6128e2161ec7e2b73833b9f7fca07122bc4bff9d2734cae91cee5f408697a2a767f
TLSH
T1BFE0DFED4AC8C23EA6286AC701E8430D8281372B93C8AA1A5700E98C7405472A6C2EB0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 a9318d76442a4b206a515f81174ce2e000365e22fac4c037cf26e31e5d1c6a98
MD5 3ea3fc129e40f27a48e479d16a81e618
SHA1 c8668b7e97f8d63905c1cea78ddc1a6e9bf25647
SHA512 1d75635fa7da70cfbefee6deaae12ea3a77908286075dca2eda4ae5c1d23ba755367af2b9d0f34a865d86f7cec64dddfa57ca05d50b3e32feca8f3161e38b2b3
TLSH
T10951E8E09FB1A198F7E883B4F1D1167336B4A090E5831F1F5452E9BD48077F8589436A
MD5 SHA1 SHA512 TLSH

Submit Download

40dd936d-6fe6-41cc-993e-98a6d7a7f164.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\40dd936d-6fe6-41cc-993e-98a6d7a7f164.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0c62af60-a7f0-4c16-9b15-fa0c2f3d9ad9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0c62af60-a7f0-4c16-9b15-fa0c2f3d9ad9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

2292b3bf-0e3f-45a9-b747-96bfe7b60a31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2292b3bf-0e3f-45a9-b747-96bfe7b60a31.tmp
Size 949B
SHA256 6ae68ef7856869cbfdef57ed89f60b1b98845941e97481ebb321aaed1c501e90
MD5 137521f0dd65c84bdd3e34c9294c9613
SHA1 9521803296d5d861fc5ed4c095d52d60cbcb11b4
SHA512 6423dc10fb0f0e3b972a52eb448ca33af76d16d34f55360df1921f4e2503c15e4db52caad72b48cd3de06a317bdaf10ae4ddfbbcf6b720d25f923eb5ba5d64c3
TLSH
T198117AF7C3D585AE89055AF09A24AE2BCE2D0A06821C7C1DD9D4EF6B93E3075E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

466c8f90-4dd8-48ff-8218-9d8fd8269612.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\466c8f90-4dd8-48ff-8218-9d8fd8269612.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5a6e2f3fa38511a9a4fe7a6ed19f85b712c3fb22aece1da9224ec503ff8ee5d7
MD5 6423e9185843b29e2be4a69c9d6508ed
SHA1 d24cf69f319759f4bd921104e0d9780eb9c4c32b
SHA512 d11091827ce47808a03672b0ed3f769abc8b896c85f07b14ab13443c75495c365491bc9fc3652acf1c292aa43a4af452637cde8f71a33cd51f1569f3a83bf027
SSDEEP 48:K0ydgMyQwBbsbcISkBK9o1yBxKRYTkQCyLQ/26gK+/b2NWISS/K9u10/xIvY1mDK:Kg1SK+Maun2KIQfe0KzaW2z
TLSH
T12991A75076AB1234387E255841A4863B425131B33528F93F7FBC60664E2FE855CFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ada2f3dd-ae78-4141-98d8-d9cd541fb3d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ada2f3dd-ae78-4141-98d8-d9cd541fb3d2.tmp
Size 27KB
SHA256 c9c6cdc7b83fd84ab28ec181fb6805d8f9253ec0fe4718ad0174cb9086abdf1b
MD5 9cd143b64bb64741b87820afc2efa8f8
SHA1 48d311f9128923380d7968964ecc4800f68c4a3c
SHA512 7510bd6ecd9e5609fc3038c21eb8b87a9588ba7bb7fa04060e428fc87a6ea08573cff99e223d41f7ec72aac38248790652a104e2251cf2d8b3530590401e9254
SSDEEP 768:cWKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/zrohV6:cWKlm7QWvUYe0u1ja8/L/E/A/6
TLSH
T10CC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be7f2f38-dd30-4a53-99ab-6ccf045909e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be7f2f38-dd30-4a53-99ab-6ccf045909e1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6bd1ab6-8512-47e6-93c3-886380073c0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f6bd1ab6-8512-47e6-93c3-886380073c0c.tmp
Size 9KB
SHA256 bd10163ca2b741589d707c2f30f8147cdfd7579e4943a58107f065b6d3b6c8ee
MD5 5ccc84710f604b3c096bafa9b989edfb
SHA1 e2f01ad9efe201d71d1efae35da9cbb65795329c
SHA512 ecdd1f7e7bf587f9fbcc6667e9d677cb8c3056f7f8cc530c2479e3669f7848b8f7313c7596256f9bd4a575e2e64786af5271c3952fb042c94aa410f0a686d645
SSDEEP 192:sxZERwWu/f2sPFIdpdgHW6+WNGY36ariIgrJ:sxZENu/f2sP22HbGXj9
TLSH
T15F22B8126E38697B8CCBD209BA25BF53E6F9503251D01E58EAFC951C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76e74d1f-3d6f-4ebd-997b-e8882f28953a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\76e74d1f-3d6f-4ebd-997b-e8882f28953a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

afd6f3a8-1cbf-405d-ac80-e7e0c9c17127.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\afd6f3a8-1cbf-405d-ac80-e7e0c9c17127.tmp
Size 18KB
SHA256 eb695f196b50411c6cea075d45bc9b28337d9910c6443318de9f1b3e8a730a6a
MD5 9eaf39e49990bc374842dcde45a3f846
SHA1 aeb95f70187d8137a5aa917be6549fe3f91378f1
SHA512 d99f11f3e753737d49de114eb2347ee4deea1f06a8c4c3cfda03832f98a2402b01cc8b235b4858440f707bca54275717cabc23ef4c5a99f199bad684259e0ba2
SSDEEP 384:/fZcIhsNwMFwUbPzeh//GJGetgOIwZOyConBoo:/3hMw++/beXsiBz
TLSH
T100827C36A8789CBB6DFB9184F18737035FB49027E7C5AF9096ED6B1D01DA5A8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b558643d-7f4a-4d57-ab5a-4db5c2c7afb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b558643d-7f4a-4d57-ab5a-4db5c2c7afb9.tmp
Size 8KB
SHA256 c92961550d2ae7be8b4e17887480016a9fdd5bc55488e91afd680b6e2c11440c
MD5 fea1fdfa3ce96b966288333928d03bef
SHA1 cdeaafca91816f7dcdf5e626ee998cbf96a565f3
SHA512 ceff13b6891a22202528c0189c13252ccedae14b7da12f223b929fe4023ea95c774237010a8b6dcfbdd48338ec4d342e920dbd7acf69ad638275ee5a7ef10e5d
SSDEEP 96:KqONkNQsjpfbU9H5ih/cIPURHl8h4otop5uMDhBoP4v+Y1xf//ojdhxZBmqxxLOh:BONJ6JUmQmiUyDXao//GBm89NxKqWU6
TLSH
T19612F935B878BC7B5EA39581F08736135EA44227DB896FD4D6DD2E1C01DF1AC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d56c36cb-a0eb-4d09-a107-449e13b9fe67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d56c36cb-a0eb-4d09-a107-449e13b9fe67.tmp
Size 8KB
SHA256 bc5bec2bee846bcf4bd87d09a238736e2b8cd34d062cbecdf41f6c8b0d35ffe7
MD5 ff0bc08b11e6b2a30979df764951768d
SHA1 50907bf0415ca4c8b5df75dbf5ba368cdc6e14dc
SHA512 fb109a8783b15a34b4ed521d9d36af40f6f403f8f0e39db6b58e6ce6cf84bd531edbb20279d40085f3f53e6c8ab041d9c49147304775b76506617636e9c342ba
SSDEEP 96:KqONk5QsjpfbUmjH5ih/cIPURHl8h4otop5uaDhBKP4v+Y1xf//ojdhxZBmqBCL4:BONd6JUm0QmiUyjXso//GBmqBCJkU6
TLSH
T1F602D938BC787CBB9EB39E45B0877B139FA4106BEA952F84DAD91E2D01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8b698b2-becc-4727-953d-11db64239a45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e8b698b2-becc-4727-953d-11db64239a45.tmp
Size 18KB
SHA256 28b13be96e1389ae4fe6ed7a7c326a8a9e5f0e28059242c82a050efee39886b4
MD5 a12e9abdc091ffd04cdce376f832041f
SHA1 e53d2738736778a6ef5a91e3f70064042b8a9ce7
SHA512 e63811b3dc3c0e554fc86add3d4c8ccbe264a1919237e012de4affa6b6095a679cbdb444b374cba6fcb3568ce3fc0505c0881389265b837ad1144ff66c84628b
SSDEEP 384:rfZcIhsNwDFwUbPzeh//GJGetgOIwZOyConBoo:r3hdw++/beXsiBz
TLSH
T1C8827B36A8789CBB6DEB9184F18737035FB48027E7C5AF9496ED6B1D01DA5A8130BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a2e8be1-14be-42a8-b17c-b06a53ac4336.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2a2e8be1-14be-42a8-b17c-b06a53ac4336.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5bb1fbb13f1e11f14a0565bbf302edb9686f2a877e9176fda1c4471b6a91da84
MD5 1c9a0448bf1d7a5bab3b8e3c601f384d
SHA1 f71f44701cec98819b5ce0498ba26823a8d06b27
SHA512 70e3bb497c6767f571215f7ab8c34fcdc209e0d424533f553cec0bf2b16f63451ef816b23586d3cafbbfb4b0a055f88d62e39f5f009f78064fad2fb215b5ee2c
TLSH
T147413B58A6ED1108B3B37F5A9BF7A46E847B78772E06D06E10110E4F0627B41C9B1B33
MD5 SHA1 SHA512 TLSH

Submit Download