c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-s6gd2w.htm
Size 34KB
Sample261002-ej8xessy8j
SHA256 c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d
MD5 966cbc85dbef6cabdbdc9c7e5496cc81
SHA1 a975b1e21c10dd0dc8fa0dc9ecc3984ca1aaf500
SHA512 4385a6988471168604246748dec63ed3bcfeecaffa1948583072d992edad73d6943a08af0c354e6fcfc007425da662357166b6909fa654e104b78c0e97c38a71
SSDEEP 768:3srOAOH3uia5QeAE4rYyH1UeH+NypaNJiA9Ky:39AOH+l51kYyHeNVJAy
TLSH
T15AF2E65356D19D37066392F5FCB8BD2C95CA8D0FC248AC04743CAA0C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1100	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{6A506C11-AC03-4C17-9F70-552A216828F0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
656	msedge.exe
656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe
4164	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4164 wrote to memory of 1132	4164	msedge.exe	87
PID 4164 wrote to memory of 1100	4164	msedge.exe	89
PID 4164 wrote to memory of 688	4164	msedge.exe	90
PID 4164 wrote to memory of 380	4164	msedge.exe	91
PID 4164 wrote to memory of 688	4164	msedge.exe	90
PID 4164 wrote to memory of 688	4164	msedge.exe	90
PID 4164 wrote to memory of 380	4164	msedge.exe	91
PID 4164 wrote to memory of 3852	4164	msedge.exe	92
PID 4164 wrote to memory of 3852	4164	msedge.exe	92
PID 4164 wrote to memory of 3852	4164	msedge.exe	92
PID 4164 wrote to memory of 1536	4164	msedge.exe	93
PID 4164 wrote to memory of 1536	4164	msedge.exe	93
PID 4164 wrote to memory of 1536	4164	msedge.exe	93
PID 4164 wrote to memory of 4040	4164	msedge.exe	94
PID 4164 wrote to memory of 4424	4164	msedge.exe	95
PID 4164 wrote to memory of 4040	4164	msedge.exe	94
PID 4164 wrote to memory of 4040	4164	msedge.exe	94
PID 4164 wrote to memory of 4424	4164	msedge.exe	95
PID 4164 wrote to memory of 4424	4164	msedge.exe	95
PID 4164 wrote to memory of 4220	4164	msedge.exe	101
PID 4164 wrote to memory of 2308	4164	msedge.exe	102
PID 4164 wrote to memory of 4220	4164	msedge.exe	101
PID 4164 wrote to memory of 2308	4164	msedge.exe	102
PID 4164 wrote to memory of 2516	4164	msedge.exe	104
PID 4164 wrote to memory of 3212	4164	msedge.exe	113
PID 4164 wrote to memory of 1952	4164	msedge.exe	114
PID 4164 wrote to memory of 940	4164	msedge.exe	115
PID 4164 wrote to memory of 2516	4164	msedge.exe	123
PID 4164 wrote to memory of 2516	4164	msedge.exe	123
PID 4164 wrote to memory of 656	4164	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-s6gd2w.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ff928dac188,0x7ff928dac194,0x7ff928dac1a0
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,5744067932101659913,3723318842087895514,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,13064156117946458742,10332373214186887349,262144 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:2
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,505901808058487577,337728169114712337,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,9670204669933816834,7244870853461950497,2097152 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,1418353374504326008,6412260972451621142,2097152 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2304,i,18141645773304962351,16760115752790424447,2097152 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,18026645798540949798,13844396133747038125,2097152 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,4980220962780442171,11633433884696473819,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,4938359076070569386,3948358697418256443,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,13734852848489665341,13605197517173636885,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,13734852848489665341,13605197517173636885,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,14506407846193174490,8250320476117135681,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,15784251032783559863,15817997497594947703,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,157203952167160929,13770492712904914902,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:8
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,11912520478083525673,6574405711458417463,524288 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,18311275982101704887,6073431333161880810,262144 --field-trial-handle=2956,i,12113199982185906557,9938206623886162474,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:656

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0044d39c-31fc-436e-bb08-3fb0c8327d4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0044d39c-31fc-436e-bb08-3fb0c8327d4b.tmp
Size 18KB
SHA256 bb1f6275af7619af7243f73872084121d159ae9183b50d0e08a14f8494edbedc
MD5 c9fbad18fcacca5785457e7fa1a585a6
SHA1 cab75a1350a1f260e44aa90d3eec8c13f6dfa1d3
SHA512 0797b91e03f5f14e133ff1639bb3332d4d24c49df459aff047e61030adb28e8634026a294ec0da53f954b6da6dc2a98238de83a2eb318dd66757dc84b54036dd
SSDEEP 384:MZcIhsNx0dppujxa9iX5F1VpCtgOIwZOy5HoI:ahF0ea9CXs4X
TLSH
T168828E72A878AC7F58E6E150F04736134F78907BE7C96F84C9EDA72D01DA1A8030B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03b91def-a996-4529-a5ae-480918aab189.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03b91def-a996-4529-a5ae-480918aab189.tmp
Size 8KB
SHA256 f643a18a79e7b1b7211aa9218af86eccf72c9b165ed545526c6c4f626c32fca9
MD5 f9cf00e98495f5def84be925f898cac1
SHA1 29400e0731bce38cd3f536fb5425c83b9ee45502
SHA512 0a3de98d50d262d9dd49b8e61d6fa766ace9cb689ac2aa7169137b95ff9ac1849f28f28d902a99c7187debf7249fa111ca24de474307528bcd81bf6af6ce203c
SSDEEP 192:LON06AmwpVQmiUyJvGsiX5FNH7Jd69lRrq5U6:LON06ipzgGsiX5F1VkCU6
TLSH
T18F121A31B878AC7F4DD2E554F08736135EA5526BEB887F84D9EC272C02DB69C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

265441f8-7361-44d1-80d5-bc06b150da8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\265441f8-7361-44d1-80d5-bc06b150da8b.tmp
Size 21KB
SHA256 f96d8510e570faf211964dd44109ca6843757e1e56b132050a98d1cd7bc60a6b
MD5 909d771cd72ce76ed0b5926ec16f76ef
SHA1 e99a4b7a9c7409ab21eb782bd78efdeea8d6554d
SHA512 50f350a5e37c5a89433620810b8f167c1d4689ab0c5eff58238ef4e5f14a423c68ce56aef9a83c5b2c009c7ab5ce72d4ccd2c8f2dd94e14401f86d0d138a7822
SSDEEP 384:AiFiZcIpzsND8TUNTUlIlxdppujxa9iX5F1V6CtgOIwZOy5HoI:bFQJawgz0ea2CXs4X
TLSH
T1BCA27D7398A49C7FADF6DA40F54632138FB450BBDAC5AE94D6DDAB1C019B1D8030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b3033a9-b2ea-48d8-a7a7-4822179fa041.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6b3033a9-b2ea-48d8-a7a7-4822179fa041.tmp
Size 8KB
SHA256 da00c94662d2d066fab1ec5197232133cecbd232ca8a34a24ced6fe468650d49
MD5 76383991542eacc1fb488013682ca66a
SHA1 d6a74ba9f146b137f50b12f68026b8be44397d37
SHA512 0e5daeeccea58be38bba41525d226d11ea207155d3bd3bcbc9e0cba57ae92187207f573ec1183e612ad200595014a938705132604c6453f6fa29dd98bd831cb7
SSDEEP 96:gqONkGQsjpfuMVwptaL5ih/cIPURHl8h4otop5jiCDpBIPuva6zx8X5Fxux++Yv7:LONS6AmwprQmiUydv6siX5FNHkJi0YU6
TLSH
T17802EA35AD686C7B8DF3AE55B48737235FA5117BEA942F84CAE81B2C01D765C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f52e0a5-699b-494d-9233-c606c41fa0ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f52e0a5-699b-494d-9233-c606c41fa0ff.tmp
Size 18KB
SHA256 06f486035daa6c77081116553961a1a4574e26b1c077c72ee496c60dadc7373d
MD5 d6430ace9361ea752d52b8d6f901b0c5
SHA1 86b0a009e35d564caf52dfd5a0ba7690718bbf1c
SHA512 e248b9ab6ca2445ce11fc7cdbc0185b21f7d7ffa1d1d0d867357313c1fd05f1671bb3718b6b1f2348bde625595d3a25a78dcbf9fba7e84321120f83d2ac93d91
SSDEEP 384:wZcIhsNxxdppujxa9iX5F1VpCtgOIwZOy5HoI:Ohc0ea9CXs4X
TLSH
T1AD828E72A8786C7F58E6E150F04736135F78907BD7C96F84D9EDA72D01DA5A8030B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f213a340-1ccc-4302-b133-3efc4993ff5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f213a340-1ccc-4302-b133-3efc4993ff5f.tmp
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb29521835d0887aef733d211fa43d2903333bb5e86e2580dbfe7db3b16bb1ca
MD5 ae441104cfb514988d8468c296b33f4c
SHA1 1de1bdd3ad0b87ba57d165cd0d5b72d99a1a48f2
SHA512 4178d6169908ca49fae4773c8986a0c9d71a515b2fb4d7ce8fb9bcc8b10c415ac00698c7add7cc45f427547535401a518211221bcfe6dfc2bdc0f71f62b0105f
TLSH
T150D0C028AD78EFF4F021113C0330400031CF88138642210A58610D174C302C30380DF0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

47b590b7-4c49-4313-9127-b865229df77c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47b590b7-4c49-4313-9127-b865229df77c.tmp
Size 9KB
SHA256 23e86c30bb1cd3e35c65bfb6c1212d3efa178f0e6432f443e5c31457deb6a810
MD5 20774da2ecf872bdecead3a14cc034d9
SHA1 2299f8b925428b8462e1eabdd3687ce8b9d7d5d0
SHA512 b1fde0306e19388405344064efcd2f36b614a9fc41971b4c67bbe9e1f2a3d6f8ee551c7aac5e6e61c7d8d7ef30a52141a751c76421b42c43755f0f924413d8cf
SSDEEP 192:sxZ3R1WN/fys8VIdpd4HW6+WNGY3RmSIg5MJ:sxZ3+N/fys8maHbGYa
TLSH
T15622C6526E38B97B8CCBE21DBA257F53E6F9503291901E58A6FC961C04E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70a378bd-add2-41a9-a8b2-11ee4db16f58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70a378bd-add2-41a9-a8b2-11ee4db16f58.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7775847a-b79e-464c-893c-f16572613486.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7775847a-b79e-464c-893c-f16572613486.tmp
Size 27KB
SHA256 05a4babb41ec1025bb7db74542d4f0b8f5d6757cd723e3b6dd258ae45b990317
MD5 eac5ef2fad28d270b0f48d4009863138
SHA1 b8002b0118f90f47c77fe7d4df0c64f656c6deca
SHA512 a36fab60b3be40998f999e2a3d171b290a7127d90f659e9db992c9cefc58aa037fa09979b2818abab0d820733981d10781a35b72426dcfa2e8dfaf912fe85078
SSDEEP 768:0o30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72LrolZMX:0o30AbSWvS2l9u1jaLmLZ124I
TLSH
T185C2DA3B640CCB7E4FC01A9DDC6AAF9B6F9802C796648D4447FA944C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8d04987c-09e9-4782-810c-3c02c1818a96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8d04987c-09e9-4782-810c-3c02c1818a96.tmp
Size 9KB
SHA256 49652a3c4c7e06fda892a33aad6aa4352890403cd9d529de3c98273d007442fb
MD5 9e7a58c412854f7b2013f29d9782f363
SHA1 f04ce1bfb326a10e0b3372e1d4da0ecb6b4d09ef
SHA512 7fbe046c178a15631e558a6eeae122ee18569386efe1ece088a42a2a133f98411e308aa51a722dd73418832bf8ecf7c6628705cfc760cfc1e0717f4c9e388bbe
SSDEEP 192:sxZ3R1WN/fys8VIdpd4HW6+WNGY3RmSIgrJ:sxZ3+N/fys8maHbGY9
TLSH
T1BF12B7526E28A57B8CCBE20DBA257F53E6F9503291941E58E6FCD61C04E7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90af19ef-edc9-4e7b-95f8-7bb465bf85d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90af19ef-edc9-4e7b-95f8-7bb465bf85d1.tmp
Size 10KB
SHA256 13fc2512f69af5ed4e7ef4dfd543c6bfe460077baec34f382bb434a874181930
MD5 27b8db58cda11644b264b8b3fd378c9c
SHA1 bd88aeb0aeab6ea032c7506e440f6fd1eca30033
SHA512 ae406f81010ce87e5ad4991b3d88ab8e6838260fe7ad2c0af603b9d87860ff3ae16ded8243d15cdf8a512f1c1fb443940d5247ba19dac67f0d2c57109bfcaffe
SSDEEP 192:sxZ3R1WN/fys3VIdpH4HW6+WNGY3aOmSIg5+J:sxZ3+N/fys3mYHbGAo
TLSH
T19722C7526E38A97B8CCBE20DBA157F53E6F9503291901E58A6FCD61C05F7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1581f70a90c702996b83cca74bd0699e4297177719c5eaa5d09fdd04578317c2
MD5 f11ec18ef5738703e9a2da8e68b09809
SHA1 315b9a774903a342232b8a3be1594c876fa73e0d
SHA512 34b5034e4341a26be8c059164344f48bddf604f070295466090fdc24e1163e91e9f53f6ea156d49bb49d7b4c19296d4b437c9d1d3fde60e559b85903269f0d8f
TLSH
T19361B4410B135A97FB9835F0DEDE30ABFD70788061739ED19360EB78860AF859C9A394
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 23208e9e81289bc81ca10ded9658edced1e8339af62ecc368c0459ce920b6f78
MD5 97cef89deb39d60e67f4d8ab231492b1
SHA1 2bfc11a02f8dfeadf96c7dad6f4ded213dbaba9c
SHA512 4c8df40928ca3690826eee84a24f5680db13544e6daa894754d66fec070f8e65c42cf87080fa8d20771b1109d3db916dadfdc3b0d0cca8277d2aefc8bc42bb70
TLSH
T1BA61A3410B135A97FB9835F0DED930ABFD70788061739ED29350EB78860AF855D9A290
MD5 SHA1 SHA512 TLSH

Submit Download

f1bb476f-5451-42eb-9c05-4a8aaf055753.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f1bb476f-5451-42eb-9c05-4a8aaf055753.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

245e2e61-39aa-489a-9033-527bc26c523d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\245e2e61-39aa-489a-9033-527bc26c523d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

2d4bd81f-c08e-449d-9ffe-8d5fb1a8398f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2d4bd81f-c08e-449d-9ffe-8d5fb1a8398f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a216724c-0754-4178-84cb-0d7390d02108.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a216724c-0754-4178-84cb-0d7390d02108.tmp
Size 949B
SHA256 51df9094ad12455a4fdc2c49581522698368a277f47c29ba83a2e07e4fac3173
MD5 565ba4c25915d30e412ad37c9088ecb5
SHA1 2e1fe2db8b5bca890fd541f8b24cb34bdf7d8632
SHA512 8866d84a779fd5794f2c2712124066ac5f748f4ee085e9f00430efd38f41b724eb65d95a034aa17678e7369db3d4599c3f371968ba1c201e0f2a02b0e927d14f
TLSH
T1331157F3C3D585AE891516F05A28AE2BCE2D0606822C7C5989D4FF2BD3F3075E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3d7ea8e608e8b6356978ced07f68fe4a30c170687c0439eb08fe0b538a5a80fe
MD5 db0d7c75e2b23f60d6ea3b2871ca2cf2
SHA1 14f06bd6ec17d87053878dea7c0bedf40ebdcade
SHA512 94b4f34df035bf28e81561fb616e827f5f64fa223d090aa4b79038d99dbb6b86f6fdab29ea428619975b94a53814f03bf8f3c21398c198139d3173355963749b
SSDEEP 96:KVFsXTtDnr0XmaarrKiSahr2FdOPnYfnSx9nBhx0dksaVxKi4aHx2/X8VY28K/64:GH7qn1
TLSH
T16F914122367B42513CBD6B4C41A6A62B424131B63014B52FBFED41A68E2FE548CFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c26307a6-1ee6-43d0-93a2-8f6fc62c3ccb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c26307a6-1ee6-43d0-93a2-8f6fc62c3ccb.tmp
Size 10KB
SHA256 2af8d6182412939a7d379102c9bde8c6fb2ee71d6746fb01d28d0e813b4a2140
MD5 660897e52333c6ae9213611ab0cbf635
SHA1 bea0afad1836fa470bb0aaee2bdb96db95064dd0
SHA512 21d06b30da1923470f837d1bc5d17cc5697e88aa994b47ecdcc334bea290ecad55305077f31d669d0e4f13d4419a7d1a609c9a491f0f21c4bab0dc6650f6e37e
SSDEEP 192:sxZ3R1WN/fys3VIdpd4HW6+WNGY3ExmSIg5+J:sxZ3+N/fys3maHbGno
TLSH
T10A22C7526E28B97B8CCBE20DBB157F53E6F9503291901E58A6FCD61C05E7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1766ede2-6310-4db6-9c45-046ca88a195b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1766ede2-6310-4db6-9c45-046ca88a195b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3ead8bf-4392-44b4-8f5c-6616cad6e4a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e3ead8bf-4392-44b4-8f5c-6616cad6e4a9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 97815b1abbd3de8001af27f017327b091c3fb4148ba50252f29ae3e34ac49dcd
MD5 5ed6f00019be18fbcee85f7658cfb3db
SHA1 2b6d0c5b2612d0e5921f37523421a5d30a359f70
SHA512 06f2a826eb466e3aff8d8eb3ff171afdbfb38730827280737f602e7b7bb71102e011b2028dc01f5cec1c9c1f80635b38d2d07caa0088e99152fba31b5d39267f
TLSH
T141411758A6FD1118B3B76F5A9BF7A82D487EBD772E06915E00020E4F4A66F40C862733
MD5 SHA1 SHA512 TLSH

Submit Download