5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-1tivax.htm
Size 194B
Sample261002-ejmzysshpa
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4632	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{EAF550E0-938D-4F36-8F22-22A335540D64}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe
4364	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4364 wrote to memory of 3964	4364	msedge.exe	86
PID 4364 wrote to memory of 4632	4364	msedge.exe	87
PID 4364 wrote to memory of 4724	4364	msedge.exe	88
PID 4364 wrote to memory of 4724	4364	msedge.exe	88
PID 4364 wrote to memory of 4724	4364	msedge.exe	88
PID 4364 wrote to memory of 3724	4364	msedge.exe	89
PID 4364 wrote to memory of 3724	4364	msedge.exe	89
PID 4364 wrote to memory of 1704	4364	msedge.exe	91
PID 4364 wrote to memory of 3120	4364	msedge.exe	90
PID 4364 wrote to memory of 1704	4364	msedge.exe	91
PID 4364 wrote to memory of 1704	4364	msedge.exe	91
PID 4364 wrote to memory of 3120	4364	msedge.exe	90
PID 4364 wrote to memory of 3120	4364	msedge.exe	90
PID 4364 wrote to memory of 1748	4364	msedge.exe	93
PID 4364 wrote to memory of 2556	4364	msedge.exe	94
PID 4364 wrote to memory of 1748	4364	msedge.exe	93
PID 4364 wrote to memory of 1748	4364	msedge.exe	93
PID 4364 wrote to memory of 2556	4364	msedge.exe	94
PID 4364 wrote to memory of 2556	4364	msedge.exe	94
PID 4364 wrote to memory of 5068	4364	msedge.exe	100
PID 4364 wrote to memory of 5068	4364	msedge.exe	100
PID 4364 wrote to memory of 2128	4364	msedge.exe	101
PID 4364 wrote to memory of 2128	4364	msedge.exe	101
PID 4364 wrote to memory of 4084	4364	msedge.exe	104
PID 4364 wrote to memory of 2508	4364	msedge.exe	113
PID 4364 wrote to memory of 456	4364	msedge.exe	114
PID 4364 wrote to memory of 2068	4364	msedge.exe	115
PID 4364 wrote to memory of 5000	4364	msedge.exe	124
PID 4364 wrote to memory of 5000	4364	msedge.exe	124
PID 4364 wrote to memory of 5032	4364	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-1tivax.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x254,0x7fff2a94c188,0x7fff2a94c194,0x7fff2a94c1a0
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,2455167902982114924,16147645235542720905,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,11564116297578540293,9668792312832311209,262144 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,1497533192479418794,14707301745395941174,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15156135834394574309,5954479737036300966,2097152 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8156837979393168742,16338574640184330830,2097152 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,15402433129029704785,1424111650759923960,2097152 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,1762411589674229853,11784045393915970535,2097152 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,10970142906486375765,12405615486371746171,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5602161194055061428,12533219863855210931,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,18311900748426515968,5837030843765114504,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,18311900748426515968,5837030843765114504,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,1757384869325550596,10518224196821321818,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,12369877957149676050,3419051931732859918,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,8794651953593292275,10522362218700908719,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,7730676796384248420,6941296793492374106,524288 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5128,i,10280358926093615329,2881803223057621937,262144 --field-trial-handle=2232,i,11392390135302736846,18443245695477698039,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3dae3e8d-f743-41c9-89cd-7c8aa7da9a3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3dae3e8d-f743-41c9-89cd-7c8aa7da9a3f.tmp
Size 8KB
SHA256 cb1624daa1819c12f8750509e346a1374e4c40a182cb1b693ebf402883138324
MD5 f6099d31dd772a7958bb708a80f4eedf
SHA1 cf3ff65b8190a00aef5ed78489e79a85642af421
SHA512 f63e0a52ee20346f42384af4942eeb2e42bda8ba8c6d4af39d54447a21232ab549b47097513a6e550a1f848d4d0b216814034312260cce158bc7bf8ac19cc30f
SSDEEP 192:LJONk6DphmqQmiUyj+q8wGYX59ezbCMmIXkk7KUU6:lONk619tRwGYX5ECm//U6
TLSH
T1CE02EA35E8787C7B4DE3AE45F44727175FE8112BAA906F84D6D81A1D00C769C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45750775-7758-45d5-8c4a-bb6276f1dbd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\45750775-7758-45d5-8c4a-bb6276f1dbd6.tmp
Size 18KB
SHA256 cf8cbef719bc14b5b5353b3defbbd7f49c66754afe3a98dd7a835aa2a24d8720
MD5 d0305e43de9ac7154f6444427cc24db9
SHA1 8c1c9041b90cedd65f7ee48de7cbd5fe9faffdba
SHA512 5fbdc6de26481b23081527f501c82b673b34f33369e18c57fb639a415602ba52a5a36412b77a58dee69d542e1afd53db614783a742c667f1dedb4c93d7268844
SSDEEP 384:6ZcIhsNNAtG5Bz6BGYX5ECm9TDXFtgOIwZOyv4oz:4hwTUGYuCwHXFXshI
TLSH
T1B6827D7298B86C7B1CE7A145F58736034FF8912BE7C4AF9494ED6B1C01DA6E8130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

612b7452-ad8e-4d8c-aa0e-aedebf9d3737.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\612b7452-ad8e-4d8c-aa0e-aedebf9d3737.tmp
Size 18KB
SHA256 c8810a1b4ce292c64d8db0c465446464df8607d34ec20523bfe7f84af839b55e
MD5 14e0919056d4c2aa939aae740892e24e
SHA1 774743503e072a97f457e71d9a7da5ae2ee40a6c
SHA512 fdbc891fcc26c135d70fa32b9f8dd09009b753867425d5363d1887131a6a50cdca3389886ed4fee9c037f43b8762bd7d88f318aef27dfb838f3d7e5bc8acd599
SSDEEP 384:uZcIhsNN7tG5Bz6BGYX5ECm9TDXFtgOIwZOyv4oz:MhTTUGYuCwHXFXshI
TLSH
T11B828D7298B86C7B1CE7A145F58736034FF8912BE7C46F9495ED6B1C01DA6E8130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8dfd63cc-f636-4375-b9b5-8e501c46417b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8dfd63cc-f636-4375-b9b5-8e501c46417b.tmp
Size 8KB
SHA256 56df91355437da906c2eeea1c2647930046607807c7f046759f7c797afd80630
MD5 a65d9a458b05720ba7d3b801cd98a2c0
SHA1 3bad91ab0d7abc44727e45ba9470d6d54a796da7
SHA512 56f1a5f59b7fbee256a395e975995b995a3206e99f332d8aa203c48b4e39722c5c1a40fccb88c1e63917ce8608eba6da12b6213ec343c753ade697e77ca5d29f
SSDEEP 192:LJONaB6DphLqQmiUyI+mwGYX59ezbCMmI9TDr7kIIvq5EU6:lONw61okmwGYX5ECm9TDwFU6
TLSH
T13F12E735A8B8BC6B5DD3A596B48736034FE8522BEB847F94D5DC1A1C01DB69C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

5c46eba4-fdd9-4e1a-92a4-d87d0f82bf6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c46eba4-fdd9-4e1a-92a4-d87d0f82bf6c.tmp
Size 10KB
SHA256 0b42c6ea05fbd6b6cf55cc51a32307b58196b05a2dbe160d41e9e0be6ed5609c
MD5 4976798c8378913009f592a16ceeb70d
SHA1 9b7f95576e23a14ad1b0dfd1dd32c4c6a6d60e36
SHA512 2b66a63fd9ac0906b89e60c8de0a4846ec75e6c5b800766652d7547aa05863d753aa05a5fadde35c45bcb46ac99b92bebebfdc972eb8a710b828e4976f8a70d7
SSDEEP 192:sxZUyDRdoWp/fusah47IdpdAHW6+WNGYg6slEIg5+J:sxZUyDzDp/fus2p6HbGOo
TLSH
T16222C7126E28797B8CCBE20DBB557F53E6F9503251900E48EAFCD61C05E6ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ea90b02-16db-4d3b-bc21-4f6e8bae4012.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ea90b02-16db-4d3b-bc21-4f6e8bae4012.tmp
Size 9KB
SHA256 11e02f86c648ca8493b4a28cf921cd0de50778ff1181f82c723266b21cf99248
MD5 3c30efbcc87c93b91608f6a7cbd28384
SHA1 5a7459668776621dda8c095108b0e9037a0d1a21
SHA512 10691296460614a283d653d3fceee7f5b8160fa4984ca2cfadbcdd951a9a08abb1ebe662fb0e34fccc3b09d65b485150fbe2b069d42097a562733527dea0ac9e
SSDEEP 192:sxZUyDRdoWp/fusoD47IdpdAHW6+WNGYgUslEIgrJ:sxZUyDzDp/fusip6HbGs9
TLSH
T1BF12B7126E28B57B8CCBD20DBB55BF53D6F95032A1941E48EAFCD61C05E66DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7ef4b7e9d539064843a64a377630ac78bf4f9a5d79832b9ed32a2a3545b5eb28
MD5 b888618fe3d5a635bc6fcc15c5e2ee93
SHA1 1feaf8935b82d465694945ee8a063498980e041e
SHA512 922a817fc80f33c07ac2ac65a86efa233177c1d8dc11228a7e7504204dd288ecf351d2f43417c03b95dfc8f97330d503fa9a57734d9aad62fa5b3392d48d7ba4
TLSH
T14961C6CC454184AFFF9480799DDD70CB37365D827A4F1DF38198D4B6A886BD4C38A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f2bc947045e0019f522964d5551fa90975527b345fb58e8e5b3966b0420e32ba
MD5 9b5c18a802f2f1b7dc3039e5fcd7aa86
SHA1 0b7f1aa9448af6fd2b5bff82786ed5de75b4cc35
SHA512 1fe532f51544c76a5a66e68771ad263c5bc074a943f51f432961f80bd2f8663996b9784d9c62822b3aff7456d702cb818f370435474939a2f58845210e0c74d5
TLSH
T11661B5CC454180AFFF9480789DDD70CB3B365D867A4F4DF38098D4B6A886BD4C289890
MD5 SHA1 SHA512 TLSH

Submit Download

ee450ea1-ad6c-4f48-92bb-6d049c0d3636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ee450ea1-ad6c-4f48-92bb-6d049c0d3636.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

22669fdf-84f3-4e40-ae56-335dde325f56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\22669fdf-84f3-4e40-ae56-335dde325f56.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

2b99b81d-6f8b-42be-ae42-a3b107f77e65.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2b99b81d-6f8b-42be-ae42-a3b107f77e65.tmp
Size 733B
SHA256 f011e472084d3abb6e9891c4b221c301f5bd75dc76cbdf0896f403c6ec7792d2
MD5 db7844a422acc4752df573201728867c
SHA1 589fc3f10bbd3f8ff4d2990b2258959aaf7dd694
SHA512 760be266b15c5dd21762e0e83c9804fff081a55085e238389cb9e50ac89e5b5a4738ff9829434f5083be54e4fbfbe8d10dab141e48c5d21e4f118a64bc3501e8
TLSH
T15D0168B3C3E499AE8A0056F06A18AE2BCE2D0642431C7D5A85D4AE2B93F2479D00199F
MD5 SHA1 SHA512 TLSH

Submit Download

831cc51b-96ed-4e4b-9a89-04fedeb08c52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\831cc51b-96ed-4e4b-9a89-04fedeb08c52.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b9d4fd59-ecd9-45e1-af17-98d27d3b37c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9d4fd59-ecd9-45e1-af17-98d27d3b37c9.tmp
Size 10KB
SHA256 d4900de00099b522e8e4e86afeb877aecbc6f7befb8a73ceb1dd8079a92c9668
MD5 17ce528a9404546aea70d09e7167ea21
SHA1 9d774dd62aa43298e550f817791917cc87aad29b
SHA512 d941749efa82040b00b73dd6799ad166cfc4a392ee94f088316192a1ce96388e845ffaa15899f4b822f95259c58b3bf05a6d0c0d795cd8c53733817c08fd5b5c
SSDEEP 192:sxZUyDRdoWp/fusah47IdpHAHW6+WNGYgjslEIg5+J:sxZUyDzDp/fus2pgHbGlo
TLSH
T1FF22C8526E28797B8CCBE20DBB55BF53E6F9503251901E48EAFCD61C05E6ADE120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4e284f4-1fb0-41cf-98f7-51167fbd103d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e4e284f4-1fb0-41cf-98f7-51167fbd103d.tmp
Size 9KB
SHA256 096e7e07311871b6b27bafb6522895b05c9fa7107e9c1e6608a0c018006e98d9
MD5 dc4033029d26a4e4d1a5ae4dd6767fd8
SHA1 5ca92a350ac785ae89fd8ebf289db2b8f337bc6a
SHA512 a9eb7a1295a242dedeb153789048de1b8053951900d3e748efcbcd5decd66e7193ffb7f089536b7fe119b717692d440294ad1324644705f6fcec251786c78726
SSDEEP 192:sxZUyDRdoWp/fusaD47IdpdAHW6+WNGYgUslEIg5MJ:sxZUyDzDp/fusUp6HbGsa
TLSH
T1B722C8126E38B57B8CCBD20DBB55BF53D6F9503291941E48EAFC961C05E66DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9bb17f8-3b27-44c2-bfb1-6b8976a0bb76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9bb17f8-3b27-44c2-bfb1-6b8976a0bb76.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eea237c7-4432-41e7-8f6d-00a2c1f8f226.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eea237c7-4432-41e7-8f6d-00a2c1f8f226.tmp
Size 27KB
SHA256 e0ed31281f9d77382d6d65e6aed2af112507235cbfe0c6983b1bbeb64cd15a36
MD5 a7ce9291fad088190aeea3d2eb24e33e
SHA1 811cdb9eb4ee9fb16cf4648d8c03ed638e695316
SHA512 128b137d2a67c39f08f9dc658c4523213dda9a83bb561b1885f295ae56ef190d9fc04cd3fe91f7f51e65d250ae8d352e2e67d51d172a1f8b17618c2320a7fe7a
SSDEEP 768:kxichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzTroJyT:kxichfPWvPZplu1jan+LKgzgET
TLSH
T1C5C2E93B640CCB7E4FC01A9DDD5A6F9B7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 65e29f9e5d7a89f183153ef62314b50e9c90693fe14f0d13e2021fdb39c2026c
MD5 ec0297cd05ccc00cf99ebff5bd281536
SHA1 e7bf31a746c96496310403a282f370f4376bb363
SHA512 8c4855357230c178e45b743abb98ee18306782c4d291aba38c53818aba4f3125132efe187702c759567da8a3a555940fb29951dfa9fd444c6c1dd08d57fdf37b
TLSH
T173113390B7B950656F49E749830D640350B13EA9516D697A135DD1FC4FCCC284A1F9A4
MD5 SHA1 SHA512 TLSH

Submit Download

d4917a02-df6c-4172-8240-a8fac6ad1770.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d4917a02-df6c-4172-8240-a8fac6ad1770.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d32a05ca-fb22-441d-969f-2bd53235c9ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d32a05ca-fb22-441d-969f-2bd53235c9ae.tmp
Size 21KB
SHA256 e76fd8a7fa7704088ada62792835d716df89676648630aa8f6220264f7b607af
MD5 8ec6c4b098d3adc82f79d82d58ef8916
SHA1 c0258f328aa4739bdfa03bd7fc953cc9d86d723b
SHA512 eecbdc34ed6ca83d7d8df8b6a05663e14702b5cca67e78642d42b1dac783d13b6e1343c8de06227bbbe37dcfb9cb8771012e004e22941f56ecd7b58cdad9a0ec
SSDEEP 384:MiFiZcIczsNX8TUNTUlIl7tG5Bz6BGYX5ECm9TDHFtgOIwZOyv4oz:3FQgCwgyTUGYuCwHHFXshI
TLSH
T1C9A26B7388B8997F6CEB9645F64A36038FF45127DAC4AB94E6DD5A1C00DB1DC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47e86add-b2f1-4e52-b557-0f3bafb19886.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\47e86add-b2f1-4e52-b557-0f3bafb19886.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 363a438e451c34c5a9486665cfc2fb6913cc67b5c71f2fc9ac8536b774694fd9
MD5 bbbf42ce305207a84331bc353899860e
SHA1 3014452b5ec3c38b90a1c6656adcd7fa08a61394
SHA512 bf0e20b9b1ab75624f5a2e8cfef2543fb1a667c672c04d58430703355424656893a582b40681f2d4b99ade7121cf9767706352e34f23b866e5bc6f419d972274
TLSH
T174411A58BAFD1148B3B37E1A9BF7646D487F78772A06D45E00110D8F0A23E44C961B37
MD5 SHA1 SHA512 TLSH

Submit Download