af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-143791-d8fbf3.html
Size 214KB
Sample261002-eza1bsvs9j
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{B4B159E4-F7BC-4AB0-96A0-833AF4688EDC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2376	msedge.exe
2376	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe
5060	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5060 wrote to memory of 1172	5060	msedge.exe	85
PID 5060 wrote to memory of 5104	5060	msedge.exe	86
PID 5060 wrote to memory of 1312	5060	msedge.exe	87
PID 5060 wrote to memory of 1312	5060	msedge.exe	87
PID 5060 wrote to memory of 1312	5060	msedge.exe	87
PID 5060 wrote to memory of 3240	5060	msedge.exe	88
PID 5060 wrote to memory of 3240	5060	msedge.exe	88
PID 5060 wrote to memory of 3920	5060	msedge.exe	90
PID 5060 wrote to memory of 3768	5060	msedge.exe	91
PID 5060 wrote to memory of 3920	5060	msedge.exe	90
PID 5060 wrote to memory of 3920	5060	msedge.exe	90
PID 5060 wrote to memory of 3768	5060	msedge.exe	91
PID 5060 wrote to memory of 3768	5060	msedge.exe	91
PID 5060 wrote to memory of 2016	5060	msedge.exe	92
PID 5060 wrote to memory of 2016	5060	msedge.exe	92
PID 5060 wrote to memory of 2016	5060	msedge.exe	92
PID 5060 wrote to memory of 4748	5060	msedge.exe	93
PID 5060 wrote to memory of 4748	5060	msedge.exe	93
PID 5060 wrote to memory of 4748	5060	msedge.exe	93
PID 5060 wrote to memory of 5040	5060	msedge.exe	99
PID 5060 wrote to memory of 3112	5060	msedge.exe	100
PID 5060 wrote to memory of 5040	5060	msedge.exe	99
PID 5060 wrote to memory of 3112	5060	msedge.exe	100
PID 5060 wrote to memory of 4488	5060	msedge.exe	102
PID 5060 wrote to memory of 4792	5060	msedge.exe	111
PID 5060 wrote to memory of 4392	5060	msedge.exe	112
PID 5060 wrote to memory of 2376	5060	msedge.exe	113
PID 5060 wrote to memory of 4536	5060	msedge.exe	122
PID 5060 wrote to memory of 4536	5060	msedge.exe	122
PID 5060 wrote to memory of 2724	5060	msedge.exe	123
PID 5060 wrote to memory of 2724	5060	msedge.exe	123
PID 5060 wrote to memory of 312	5060	msedge.exe	126
PID 5060 wrote to memory of 312	5060	msedge.exe	126
PID 5060 wrote to memory of 2376	5060	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-143791-d8fbf3.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffac585c188,0x7ffac585c194,0x7ffac585c1a0
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,9798082605183109791,3354604148655159459,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,1160657728958295185,12025620462292982455,262144 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,11845330974252797809,12879556020959504032,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,12750934131730313137,12306073433962026690,2097152 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,3332287658955134844,16336847028555261282,2097152 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,13070288299286506895,5983455230959872323,2097152 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,11340873970158185251,12260156896967468264,2097152 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5195257422571261921,2646297443421472229,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,8115288645336286976,11627284290895958428,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,13408573775399317363,5602951232064828407,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,13408573775399317363,5602951232064828407,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,16007888486130537654,11205895087144798916,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,6060705348482348970,17013079925401602856,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,6496884303309634227,11609977321267590464,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,18049741298548099393,13117655051153690790,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,11066307558191353661,10369824115544567404,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,17098312744148210075,8474308947438386558,524288 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,11743747008077555044,8835753970996441833,262144 --field-trial-handle=2188,i,9942832277047758946,14897830517952423791,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

352e6e72-93f8-4e7d-bff3-cad604152d15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\352e6e72-93f8-4e7d-bff3-cad604152d15.tmp
Size 8KB
SHA256 827e683a762e3f9b9b6707f1a255692476febc8f319c2d15723c09358401c869
MD5 9d151c9187e45cad89ed502b1adca8f6
SHA1 94412f1cd8224196f7524e8c2fd6780135d135b8
SHA512 b185fa854223de416c75cc5a5b83d8e6fd19ef2f334a12fe9e3b2bfa617d7572ae79e51928cbc19526e322ed34f746ebd4a2559b05ff1ed79212063e38fdf32c
SSDEEP 192:LJONS6DphxqQmiUy9vtwGYX59ezvCnyRWNde+kIIdCrq5/U6:lONS61y8twGYX5EOFNwdNU6
TLSH
T1D7120935A8B8BC7B5DD39951B48735135EA4512BEB896F90D6EC1E1C00EF19C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53744fdd-de34-4f10-bd83-ccd3607a9089.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53744fdd-de34-4f10-bd83-ccd3607a9089.tmp
Size 21KB
SHA256 2eec5be42fed459693e615d41cd51c16e1986e2b9d5b862ece1739b05399d4bc
MD5 a1648fe6e8444f54005d298bc2df3e9f
SHA1 1f67ca017fce7efdc3b946929332431ef809830e
SHA512 3b495a1dc0c7dca3194a01d7bb2bf2bb7f029f896a8da4913ba0cde990c74de983087b28807f30b357893a25b31c9f6e046419810e0fcfaf9066b0906c937550
SSDEEP 384:eiFiZcI4zsNh8TUNTUlIlfjQC5mS6uBGYX5EOFNPdNtgOIwZOyGToi:1FQEowgjX5GYuOFtbXs19
TLSH
T124A27D7388F4997F6DFB9A41F64A32038EB85067DAC5EB9096DD5A1C00DB0DC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e081736-4f14-49e7-adf6-ac2769430b0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5e081736-4f14-49e7-adf6-ac2769430b0f.tmp
Size 8KB
SHA256 6e9f8431080f239622219722e5b42cccfb998d848e2132f03accae86713fe8ae
MD5 83abf04befe7ac4b5a266826bb1c73f6
SHA1 facd494145d2da188d8c08086b3d348557f5a1d0
SHA512 540c4eb02bdc471019b478e08c11ffe5034494a8ea28dd205f1be690719e736b74ff31766c26e7e3865675a06ea595fe49234c96918c9127b8e0337a7e6a829a
SSDEEP 192:LJONs6DphmqQmiUysvq8wGYX59ezvCnyRykk74YU6:lONs619XRwGYX5EOHtU6
TLSH
T11802E935E8B87C7B8DE36E45B58727135FE8212BAA956F84D6E81E1C00D768C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

70af818c-6776-45d2-93f7-2cf440a56050.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70af818c-6776-45d2-93f7-2cf440a56050.tmp
Size 18KB
SHA256 0c44270103f686c54e279820a1b92686dbfea1ce6fb3ff4dadcdf6880bd7dd24
MD5 e098dea7e938da50ee12c91afc4b38d7
SHA1 bc17870233c0461d254c46d9138348bfa545bf8b
SHA512 7d44635ce148eb7be9f6aa95b1254470f75bec8825117fadfada8ca7dfcf65ba37101dc886927f79355628d652b72ff064be52337039408983a480fd575d5ab1
SSDEEP 384:xZcIhsNAUCjQC5mS6uBGYX5EOFNHdNtgOIwZOyGToi:ZhrX5GYuOF5bXs19
TLSH
T1A5828E7688B86D7B1DFBA141F68736034FB8902BE7C5AF8495ED6B1C00DA59C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 445ad9f827b313d873769c8271c63206048607729bfe4d8014bafd842ac4ee06
MD5 cde798b07199e281af213e327a5bb61b
SHA1 3286cdf8e400ad6c16a2acd1df88cccbb58c54a8
SHA512 811081abfafda21f073e6a998da870a9fd6d5c8b4f009f229619e8078f745c0eaad2d96be9a32c89975ce4ec0572ef94991265b9fb8bc2d9b538706ecfe306a9
TLSH
T12BE020F928C8C21E721C684F03D8574C87817E1B96C469CD1B40E54874054B0E6C2D60
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 151523df2815aa076a5dc6475943e85e3eb6877ce6dca732b97301d96fd0e657
MD5 ed5f0f536c40eeaa4458d0cd3eb07dea
SHA1 296dd764efef4fac12f00b739a4072b153725ac5
SHA512 c978eae1481b5efbd04ed452a785a38906810a22ccc371886b658cd2d664f43e13a35fb338d292a4c4ef287394f49c743a5696155b19ef2d99f3d5c58a639b18
TLSH
T143E026F858E8C32EA308754703AC530CC3A1B71B93D8A99E2708D5897805850A6C2FA4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b325736f7792eef42ada93c6946d480475066741a19e3e84216bed92bd517241
MD5 ed62bb926aaee441d18454884a080b14
SHA1 f3008cf3ffafb247cb9c0b3ea38aae93ef6b62ac
SHA512 9a97bf6f572d0284c0397d091006f0d9adb164cd3aa22932996a8fa70718494920e5c59f492a2490390ddd88be65d07c9efb88b22a1a0fff61a4fb093ab2cfee
TLSH
T19361C6C01EB9F5A9FBF84378C5DA13A738F498B8358B1F52105BC1B9640B72558C032B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a42ee06ee711efd96e9eaeade7f58febbb4bfa667dede1ead9663f1ec8959588
MD5 a87dba9effa320d04b3e23870d2f536b
SHA1 df1b833d3913a5afb65def3677d54b2f1813e3e7
SHA512 4077710ac2a6b96dfd1ed0521bf8961f549d9b558de1085a2f99788e5a72e8ed756294a37af7718029123b11b6bfd53d45b5a3d931b17c9da334bc0d7ff228f3
TLSH
T18961B5C01EBAF5A9FBF84374C5DA136738F498B8358B1F52105BC1B9640B72559C032B
MD5 SHA1 SHA512 TLSH

Submit Download

fd429a58-ac3d-4887-bc5f-9f06d5155848.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fd429a58-ac3d-4887-bc5f-9f06d5155848.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8c0139a1-3dd5-4e6c-930c-2bbf5805b464.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8c0139a1-3dd5-4e6c-930c-2bbf5805b464.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

acd801d2-2658-4073-a881-6fc47f3d723c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\acd801d2-2658-4073-a881-6fc47f3d723c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b1f28172-4612-4197-871e-41c96e71e705.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b1f28172-4612-4197-871e-41c96e71e705.tmp
Size 949B
SHA256 3ea17f0ba5a38a5152b9fe50dd8a567f29aabf2782752835974c119859177da4
MD5 5b335517ce15cda5436334fedc3ba1ed
SHA1 5e50fd2415d92528d2742e67b2d771fde872055c
SHA512 13638ec119aca0fe53a559937341b77404ec50e3a8e411ad72d268efb3e465e094f5dcfa9289cc0e8fbf16b71ea35aee81c523316194b6afe7c6d611ffeae00c
TLSH
T18B117DF3C3D585AE890516F05A24AE2BCE2D0656431C7C1985D4EF6B93E3075D00159F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8f9d218c1fa79a1cd9ef8a33d4778ff76fa979f805226687c9ba455fb715c4bb
MD5 ad75260429fe2f1eef87b043f510b691
SHA1 9468e551396bc3a60777a22dc5f68133a980022b
SHA512 50b22c7425ea60ad980cfb01ab02b34bd88577b17c053445189eb6f2a6f33f69b241322e0bebd7d031f740105c461e799b3aedb544721862870fc968634f8f39
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGu0yLVUplXD34brOrIS94K9d1P4x9oYePPU:K4HmKg4Gyq8K7qAziKoY69
TLSH
T1D3916110756A2211387E2A8C42E4A66F024131B37568F97F7FBC5191AE2FE445DFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1b4fc6c-5379-4ee7-bb06-4d88172c7672.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1b4fc6c-5379-4ee7-bb06-4d88172c7672.tmp
Size 10KB
SHA256 74377f3f3f48a0cfa0b7987a1b800d3e7eb0978e23b1d83f1b3655830ec0d412
MD5 ef5a4f59b33e2e9b4c363d58ceaa035e
SHA1 4fd05766f8d0c09e29eabf68589293441e0da933
SHA512 1c9a0363389aacd3d4cc08ec9c3f456f026b3eda87bc7b7e236a988c755a9f774e2ce27361dcbc5fda6a56cc547dd3b785d40fa7c764ce2592a497fb732c317b
SSDEEP 192:sxZ1RGWZ/fwsjghnkIdpdyHW6+WNGYgnv+WIg5oJ:sxZ1PZ/fwsjgx9QHbGV1+
TLSH
T15B22B7526E24697B8CCBD20DBA25BF53E6F9603251951E88A6FC861C05E7BCD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a2631aee-0d01-43d6-a88b-dd4590a1f13f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a2631aee-0d01-43d6-a88b-dd4590a1f13f.tmp
Size 27KB
SHA256 94c26e7ee3446b61d23c96d553eedf9b64d290fa2536cdc4503074d9907abb58
MD5 7f57e1c1e7ceb1e6b666f82606099182
SHA1 9ca660ed148c4c8ecec0b2d09038b352946cff6b
SHA512 0d83e22c447f88c0b755c6c5d9a86f316b16229567588944f3f784db2496f6a8e84e3933c783cefbb6b92678ffc4557f69f07fdd898dec88af32d8f347560ce9
SSDEEP 768:OLichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzNroFcfz:OLichfPWvPZplu1jan+LKgzm6fz
TLSH
T163C2FA3B644CCB7E4FC01A9DDD1A6F9B7E9802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca4ff333-f186-4ed6-b4ac-b4d22374247d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ca4ff333-f186-4ed6-b4ac-b4d22374247d.tmp
Size 10KB
SHA256 12548a332ae9246b4f08266a051aa3dccbf55069e8f69764bcf86e3beb75752d
MD5 6832060352ec8ff003a65f1e8f869b0f
SHA1 832cca6cc1d884f4d9ba35b4542735923aa09ebb
SHA512 aea49508f61671b8ef0b86ab20c6b6a8479079c068282d5b2499d3c7ff9a7c30299bb1a9ab40749aa14cf2aa1afa6c7c6561581f02ca6c27f1f82d797158467c
SSDEEP 192:sxZ1RGWZ/fws9hnkIdpdyHW6+WNGYgUv+WIg5CJ:sxZ1PZ/fws9x9QHbG01U
TLSH
T1D022C8526E34A97B8CCBD20DBB25BF53D5F9203251941E8CA6FC861C05E67DD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0d4a5a8-5efb-48af-a33b-9568775abcc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0d4a5a8-5efb-48af-a33b-9568775abcc5.tmp
Size 9KB
SHA256 6836c8f021ee90e801a8251a1f22eb9879fb96266a2a7ec60e94f276cdb16e88
MD5 4d403826f891fcb6e67cc304c3769e8a
SHA1 5aaf688293c252549ca1cde0e0f916c89d21bd90
SHA512 c8245fabe2695823266f2da7902ebff5d8c32b2672fb9454cea4ddd779f7b9a6ea9881ddd80a08511b2f3a6eb3b8cac98c8fc6a942aaa6a5e2539d7fe4edbed3
SSDEEP 192:sxZ1RGWZ/fwsAhnkIdpdyHW6+WNGYgUv+WIgrJ:sxZ1PZ/fwsAx9QHbG019
TLSH
T17A22C9526E34A97B8CCBD20DBB25BF53D5F9103261941E88EAFC861C05E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5ab2830-2bc9-444b-a1dc-3d2e5e97ed74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5ab2830-2bc9-444b-a1dc-3d2e5e97ed74.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8da0253-570b-4b50-a0f7-73f28e308409.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8da0253-570b-4b50-a0f7-73f28e308409.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f083a1bf-e7bf-4fef-8061-b3b66c7097a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f083a1bf-e7bf-4fef-8061-b3b66c7097a8.tmp
Size 10KB
SHA256 1dbf26bc72c1d6b7b85f731b51efec0daed3a0d53bdef54549dd75e3ce7f5eb4
MD5 29d277cef23d480162bc652f8e20a15a
SHA1 cbc5dd31f7b4372e9bcb40c5017d01680a141a96
SHA512 e3299e26541abde0320f1d9cee78bc5e140d538cd0053e8c30b596f4c3d004dcba7031baf441d584a0bd605bf0e84925df07b0c828a7f4b330925b16812d8deb
SSDEEP 192:sxZ1RGWZ/fwsjghnkIdpHyHW6+WNGYgWv+WIg5oJ:sxZ1PZ/fwsjgx9SHbGm1+
TLSH
T15322C8566E34697B8CCBD20DBA25BF53E6F9603291901E8CA6FC861C05E7BCD224740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09790f21-f57c-473d-983e-c38a832a5a39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\09790f21-f57c-473d-983e-c38a832a5a39.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce31932b-1b16-4b54-b17c-5f581b791a92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce31932b-1b16-4b54-b17c-5f581b791a92.tmp
Size 18KB
SHA256 65b2b546caf43d5f9c72f2ea2c8722ab80bbcc2b87a8ee4562d4ec549aaa5d7b
MD5 067d8325481a9fec08497bc711ea1458
SHA1 cc149a68a91c747405bbc18e456ce06f4d19c43d
SHA512 b30d8fe1717e3a2b5bd0919b781d5534c4ec801eb3ae27a0eaa9d64712b22e126d6b2691eb274050ddcaf33df1cbfac4dab26701a9eb5633a2ebaa630ca68734
SSDEEP 384:HZcIhsNAUfjQC5mS6uBGYX5EOFNHdNtgOIwZOyGToi:vh0X5GYuOF5bXs19
TLSH
T1BC828E7688B86D7B1DFBA141F68736034FB8902BA7C5AF8495ED5B1C00DA59C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25803437-90fc-448d-901e-d03e17cba7e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\25803437-90fc-448d-901e-d03e17cba7e1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f582567f83466c8a5f9fc7e7e303cfc94d13dc8d3e72abbd982ddc8c67a341b7
MD5 db5a7be6b15b620fe0035ee30590b947
SHA1 fc470c25a837169d0d2d3a4ef8bbcd5762c88e2a
SHA512 9f241fb9444a93ac45c4a83b7bc77872d0ac2fba236655189e899b8d55aca782e0bfb8251e44bec02af0ff7e6c814393c1bbc5dce7460860b1c0b1198ab4b173
TLSH
T162414A58A6F91148B3B76E5AABF6A96E447E78372F0AD45D00000D4F0A37A00C971733
MD5 SHA1 SHA512 TLSH

Submit Download