3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-uwm2fz.html
Size 171B
Sample261002-ej8xessy8l
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2640	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{6C416BA7-F553-4850-AA60-5CF095C58B0D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe
4544	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4544 wrote to memory of 4296	4544	msedge.exe	88
PID 4544 wrote to memory of 2640	4544	msedge.exe	89
PID 4544 wrote to memory of 1620	4544	msedge.exe	90
PID 4544 wrote to memory of 1620	4544	msedge.exe	90
PID 4544 wrote to memory of 1620	4544	msedge.exe	90
PID 4544 wrote to memory of 2316	4544	msedge.exe	91
PID 4544 wrote to memory of 2316	4544	msedge.exe	91
PID 4544 wrote to memory of 4892	4544	msedge.exe	92
PID 4544 wrote to memory of 4984	4544	msedge.exe	93
PID 4544 wrote to memory of 4892	4544	msedge.exe	92
PID 4544 wrote to memory of 4892	4544	msedge.exe	92
PID 4544 wrote to memory of 4984	4544	msedge.exe	93
PID 4544 wrote to memory of 4984	4544	msedge.exe	93
PID 4544 wrote to memory of 4988	4544	msedge.exe	95
PID 4544 wrote to memory of 4988	4544	msedge.exe	95
PID 4544 wrote to memory of 4988	4544	msedge.exe	95
PID 4544 wrote to memory of 4212	4544	msedge.exe	96
PID 4544 wrote to memory of 4212	4544	msedge.exe	96
PID 4544 wrote to memory of 4212	4544	msedge.exe	96
PID 4544 wrote to memory of 2564	4544	msedge.exe	102
PID 4544 wrote to memory of 2564	4544	msedge.exe	102
PID 4544 wrote to memory of 4012	4544	msedge.exe	101
PID 4544 wrote to memory of 4012	4544	msedge.exe	101
PID 4544 wrote to memory of 408	4544	msedge.exe	106
PID 4544 wrote to memory of 5060	4544	msedge.exe	116
PID 4544 wrote to memory of 4220	4544	msedge.exe	117
PID 4544 wrote to memory of 1504	4544	msedge.exe	118
PID 4544 wrote to memory of 4348	4544	msedge.exe	121
PID 4544 wrote to memory of 4348	4544	msedge.exe	121
PID 4544 wrote to memory of 2184	4544	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-uwm2fz.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff88090c188,0x7ff88090c194,0x7ff88090c1a0
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,3030260164472398067,12439178237947202695,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,10747214295416435124,11900028912830068167,262144 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,6788009632774248645,9974508492308179593,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,5912440804459553093,11552972618430602581,2097152 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,2571636354943066290,2500085465035890882,2097152 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,7453387311396811868,16450607299104128248,2097152 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,5019779293696676397,10470103292889760087,2097152 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2712429103427058866,14552024058941171876,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,1920686236182632599,14298213578985850670,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,17904427254640297591,4021384371261936035,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,17904427254640297591,4021384371261936035,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,5764775841009907541,6981077069252288909,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,10021911748294247542,10001058999724968404,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,18408900846863350729,15343471831708087269,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,165175798025338048,5415362414548492639,524288 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5924,i,8608372781327656226,12270995190207987225,262144 --field-trial-handle=2444,i,12354579688374273322,10125463258341087271,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

31030eb4-d0b3-4cc2-8b71-7b7b0de50660.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\31030eb4-d0b3-4cc2-8b71-7b7b0de50660.tmp
Size 18KB
SHA256 1501d9da3debc8189a0d4e9b5ffbd549dbf44e16b5a6de5a32df2e9c3500bb62
MD5 2758436fcdadc375038d314844091a19
SHA1 6af36be89bcfcd1ee2a8bb93c1fbcd42a389b5cf
SHA512 85c981bdee8c75a91acbd0081118c9b8258073cb40336db1fcc5b502b096fda736cbc2f2f32b9991d8c72735a448130b0c1da7b6dd60a5d02a7c184e5e845eaf
SSDEEP 384:gZcIhsNsjxH1NfUzIGmXB8oMcXgiRtgOIwZOytVo1:ehtHLOEnM0giRXsyi
TLSH
T1D3826D329C78ACBF6DF7A544B44636039FB8502BD6C5AF40D9ED6B1C01DE2A9034B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

779643da-80a2-4b6e-8c8e-a678a8bd639d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\779643da-80a2-4b6e-8c8e-a678a8bd639d.tmp
Size 8KB
SHA256 a7d365dc6436a518c9d4da6aeb45ba27e741bab4a48d96936f1ccd33bdfbc1ae
MD5 9c5878890ab9aec4cee8c07dee16e04f
SHA1 ca663cf7f6265ccf98a5718c76346054dd8eed6e
SHA512 8c6f4a27d2b75a4198fa7437d100fc4722ed900cc12fcca7ec723f31af813cb075bab1b5624250bb1c4aa9a60c0eedd3b8e419fd600e172715a8172a3f107e48
SSDEEP 192:aONW6IE7QmiUyavTPuIGmXNjzorvRa0UC7s3VU6:aONW6DtLPuIGmXB8oesFU6
TLSH
T1A802EA35AC78BC7B9FF3AD09B4863623AFA5102BD6951F54DAE81F1D00DB25C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c668c5e-bf1f-4e05-a71a-79364b886a13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c668c5e-bf1f-4e05-a71a-79364b886a13.tmp
Size 8KB
SHA256 41da6c8153e4ee2deedda6e050b08a45a97e57db77070ad8e0a37652aab86ff7
MD5 0c6dbd43b8b8c8ee2d1b074908dffd79
SHA1 cd083d12090ac04c1aa905bb27e1040cd017df0f
SHA512 b406e1da2470f49f9fba4754e7dd90b362180f6eed9f71b65c75d7d5516bb491b72deae3739f82fbc062686b13dc7f6ba46e69ebfcb31c67eb5895b2931a8ba6
SSDEEP 192:aONV6IEgQmiUyOvT0uIGmXNjzorvRa0/cX/eUPL27HwqHU6:aONV6DgP0uIGmXB8oMcXQHRU6
TLSH
T1E812F932A8B8BC6B5EE3A944B4473513AEB5512BD7896F50DADC2F1C00EF25C134A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a287dd4-9475-4d5f-8c6f-395b43660039.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\2a287dd4-9475-4d5f-8c6f-395b43660039.tmp
Size 105KB
SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
MD5 3c64d7d928426c0990a1d275b3d712c7
SHA1 ee73164dabf406188415054f8478e3e0a735499b
SHA512 8362ae4d667e7f8e36014d289a1d224e820d3aa7afde9c1a3cbb3f608d045c8478266170b54db3988b0ce2ef11cec1d52e8dc8464fb773f77e3f48575752d729
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e73b391410b47c494ee7953905a0c60fd04c6bc35617583539b46b92968689a8
MD5 c67fbef7f62bf0056c3e3f786716b78a
SHA1 45f832458a5b84f29df5280a7973ebf46d014c4b
SHA512 623599849df6e275e849b53aa15de4c0c6df018ceb72805f4afbfea2a8577410fc6f21085b8473298805a9eec11bfc75b61276472cfcad39c54461995984dd1a
TLSH
T180D0C0F0CEF896F0F031343C01344142308C274122021211B432001C0C900C34265DE8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

5cf5d934-57d8-4af0-a391-64504994cba4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5cf5d934-57d8-4af0-a391-64504994cba4.tmp
Size 27KB
SHA256 936590e5ce653b7f74b5c8c97f631af5fc1b5fe2e8e5d7abc86192287d91f53a
MD5 48107f9dc2a2ed90f2ffc7800e856bb7
SHA1 ef8b4c451b9d0638d855dfe64e959b2d75ffa9d3
SHA512 ad9de4647bbdec1b4d4e1b7b4115a5319333b75d05c6fa983a6eb1dbdddf689a2034507cb0959d0fc6fc0d9c9f945b90a8f80b369a8c96ddb09be5914bc0633e
SSDEEP 768:9rWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Uro4Gfe+mR4:9rWPcLKWvKeEeu1jaClLiF7/4GW+mR4
TLSH
T142C2EB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A648D4047FE944C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ca2e47e9da69276c8befb0b18fe1117dff5d862eb3e808f058708407d0c38549
MD5 9b55854ae81c69c0ca343553729eaf60
SHA1 f53795f950e803d66ab136e834e4543d152bb275
SHA512 cbbdc7399420d0064710e4c031640d7da69cd1ffedc684cc3c118e87a75ddc3e298e959b20be80748a9b97a281e8ec9addd242521de865ea88edf55e568e863a
TLSH
T17C6180C40640C06AF7D84174B5D6484F3DF7E5BCD1B34EE614A8D976AB0761240C0E7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 517440c0407436b22bbfc4a29c0c573903534a49a7c4196af8eca7835bea4d5c
MD5 aec33a4951d6c0f2ed72311f5e73d67f
SHA1 4728026f8f277dd2ecc519631cf71998fc4aa857
SHA512 04e0130450a7260a6d54d728214de2c533437d91fd4189aa27b7d094a3d65373bc3d716e32daf31444d9808872611695b6033b23567fefbbe5f36f73e1321d81
TLSH
T122617FC40640C06AF7E84171B5D6488F3EF7E5BDD1B34EE614A8E97AAB5761280C0F7A
MD5 SHA1 SHA512 TLSH

Submit Download

f7eee823-68ab-4c55-ba0e-db7f3f3a3d76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f7eee823-68ab-4c55-ba0e-db7f3f3a3d76.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3ccaf7d1-e253-40c5-b877-9873a262bebb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3ccaf7d1-e253-40c5-b877-9873a262bebb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b0599bc5-b61f-4d4f-9ea2-ee2cbe36b8d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b0599bc5-b61f-4d4f-9ea2-ee2cbe36b8d9.tmp
Size 949B
SHA256 9b1e7a1b14b2806b65594c65e54afd1488968ba040d43df4635a68736ff167cb
MD5 858f9dec151d35a6b9ab6732680fab4c
SHA1 81625b9f7838c1b9519daf922b4753d924b16f21
SHA512 b4a8db679a19b2e0d45ace9612d7cbb47b81a03311f1d78f51a633841e36fa8ea066676cbd9185f8357e545ff072730b3538677acdc9cce6aad1aa81c0b79ce6
TLSH
T124117DB3C3D585AEC90556F05A24EE1BCE2D0605821C7C19C5D4EF2793E3475D40299B
MD5 SHA1 SHA512 TLSH

Submit Download

efd57d85-7e10-4bca-ac93-e91d79028c9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\efd57d85-7e10-4bca-ac93-e91d79028c9f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e22674d899d71243693123d21d8127bc957321dcf9112072f3bb0ea2eb9e3fa2
MD5 27318c5e488c0766faa103e0a0ce7d11
SHA1 62b14dabeafc8bb629669f8dd24546efd9672a85
SHA512 985654b2bf0a20dbf326e395eab0c14c197066bdfcaee28b553cf0a4946e4abf76c2c9ef6fde7fe5e3ecaada7f21fe06bb23fc571c36f80a0e6fb9d0ba61de9d
SSDEEP 24:KYuhuIcIRKqh41aSrclyXytWRktI/KBhK1eSEgD5HknmOjh7PvgnD6mIzjvKWIhq:KAfIRKc4MjyJaI/KnKgTmIPKzSwTylz
TLSH
T1AB913211367A025138BE6A4C56A9971A524172F3306AF52F3BFC40A75E2FF584CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2b0bfc9-1d30-4a63-a400-7d83a4354fa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2b0bfc9-1d30-4a63-a400-7d83a4354fa6.tmp
Size 9KB
SHA256 b352738862746f6bae0de4d1d40202e23808681e7f7f6e622076cc6081ec1d0c
MD5 112a701ec53af9b1d1ec5c9e0e0529f0
SHA1 cba90a51a256603a64cc684f3c487a31202f6f58
SHA512 33dec58b9a6e90be5fb768b5281c8a070902de963928ba75cd8c631d64cf68d3afccf41523539faff3f619e8873a2fb36caa698d3ef51a6493fa2c990e24f86f
SSDEEP 192:sxZmRuWF/fJsP35IdpdiHW6+WNGYapYhFIg5z3J:sxZm/F/fJsPCoHbGwL
TLSH
T1AD22A6526E38A57B8CCAE21DBA55BF13E6F9503291D41E48EAFC951C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad4926e7-8ae8-4432-aa45-2a23d53abae2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad4926e7-8ae8-4432-aa45-2a23d53abae2.tmp
Size 10KB
SHA256 c456fe827be4d3139993998ed1874ba91f44087efbb2855f40570e5e842dbfc9
MD5 32b79fa02f6543dbac7f921c2450c177
SHA1 ff0e90fd30fca629e5c5b1e47ea698a0772928e4
SHA512 95f67410d97caa6bb397731696420fa17c12a8c2b1a36c0296329c888b2e97f7190e85d95b622ed85a1c729094dd5eb31615c6efa8ac24a44177a07f808817e9
SSDEEP 192:sxZmRuWF/fJs935IdpHiHW6+WNGYapYhFIg5zFJ:sxZm/F/fJs9CCHbGgN
TLSH
T19F22C9526E38657B8CCBE21DBA55BF13E6F9503291D01E48EAFCD61C04E76DE124740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad6aa464-3f32-422b-82f6-b7f348135930.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad6aa464-3f32-422b-82f6-b7f348135930.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8d0b0da-7cb8-462c-9ca9-482804d6fe6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8d0b0da-7cb8-462c-9ca9-482804d6fe6d.tmp
Size 10KB
SHA256 2ce2abedd5cd21878a01742e5e0bacd415b6dc60b3c1ab0ee9a7a8849a920790
MD5 0f09f8508b1aef233268a6948bd7395c
SHA1 8ad3450b7fcb00b42b08b1a42329d2784c6a4ad2
SHA512 66bfccb6d9d90463cae818cb1706de512b2e571c86f04d3bb71192180c2c64c0e49947b56162f50c62366666b909142ad13fc30314c8de26c41bc0409e3451b0
SSDEEP 192:sxZmRuWF/fJs935IdpdiHW6+WNGYapYhFIg5zFJ:sxZm/F/fJs9CoHbG4N
TLSH
T18E22C8526E28A57B8CCBE21DBB15BF13E6F9503291D41E48EAFCD61C04E76DE224740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9487b4a-2f07-4bdc-b9b1-03354b851b20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9487b4a-2f07-4bdc-b9b1-03354b851b20.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f3a09a68-7c2b-4071-9df5-51b149df7e67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3a09a68-7c2b-4071-9df5-51b149df7e67.tmp
Size 9KB
SHA256 abfd27a7b10db115f04b74301caba3e07e28a1a752968df9892ad6422667cd81
MD5 c791926ff24fe9b5251f060e293d18fd
SHA1 37a090ebae386d726ac360f1d9c0f6fbfa309ebf
SHA512 a873ee54c847b4e8339909575622f34a733ac6b4cbe5aa8c25a8b6cc2673b7279a983d9dc3b1105a180c0dd11474cecdd3deac15fe4c6fb25251b54e0426b1da
SSDEEP 192:sxZmRuWF/fJsa35IdpdiHW6+WNGYapYhFIgrJ:sxZm/F/fJsaCoHbGw9
TLSH
T14812A7526E38A57B8CCBE21DBA65BF13E6F9503291D41E48EAFC951C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e0496d2b-c424-4def-919d-bea92d73c6a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e0496d2b-c424-4def-919d-bea92d73c6a0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f9d4f6e-7983-4cba-8840-ed6c6a45e089.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f9d4f6e-7983-4cba-8840-ed6c6a45e089.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f06860ae-1193-4e9c-98c4-d98af438d7a7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f06860ae-1193-4e9c-98c4-d98af438d7a7.tmp
Size 18KB
SHA256 0f4d270fcc90cc007559c2636aeb6eea120a1f596e7203c8c557d7c2dd7a47ba
MD5 1f8557bca4ae524b939815ca8f22f9ac
SHA1 a5b4b9ee6c205c9755b4ff56c3bd2f8f6e89b626
SHA512 f7adf3802fb3d8e096091808ec416f09886626af5d9ede9cf0e5c2ded45319134d56665ab7048a9a0c0496a9df7e0e130be2a04f06509fdf1f7cc68860c9f825
SSDEEP 384:0ZcIhsNssxH1NfUzIGmXB8oMcXgiRtgOIwZOytVo1:yh4HLOEnM0giRXsyi
TLSH
T1E1826D329C78ACBF6DF7A544B44636039FB8502BD2C59F40D9ED6B1C00DE2A9034B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8298220-23c1-4e74-b514-9fa1d0d81c7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f8298220-23c1-4e74-b514-9fa1d0d81c7d.tmp
Size 21KB
SHA256 b3884846592ea3257bbdd69eefb98b499578032fb3e7a6f3a9219f6fa33bd39b
MD5 800ca8536e434e2c4bfeeb5e3aa35818
SHA1 0274e27107adbb1130c933b650fca3acb181e7ad
SHA512 c0197e03e38dc46358eeacd1a218262353c8eeff8dce6b1b8b034968341e6224a9106a525ca174e72f4933672d444067b3c32ab22608f32bf47632395d0613de
SSDEEP 384:9iFiZcIuzsNk8TUNTUlIlsxH1NfUzIGmXB8oMcX7DiRtgOIwZOytVo1:0FQuZwgaHLOEnM07DiRXsyi
TLSH
T10EA26C338CA4EDBFAEF79A44F54636039EB45077C6C5AF50E6DD6A1C009B1A8034BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 531f9d614024456be3c3f4d68a9ddbc1b15f618a4471f10525c0e4aa64abaff2
MD5 7e846d4df57c3a9013cfcef68f343ddc
SHA1 8f567d7694ecff39dc13f3ff0b8159afec869f56
SHA512 182cca9871aa2c6573807f7dfb1d3b1f99bb8d77a597b576212d4865fe9612a0949cf018887f354c00ed53612c0b7b07d95e26585a964022a2754da2ad8ab462
TLSH
T171411A58B6EA1148B3777F269BF3A46E847A7D632E07D55E00010D4F4A62B44CC71737
MD5 SHA1 SHA512 TLSH

Submit Download