5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 06:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-lgp2hp.htm
Size 194B
Sample261002-hjqydstdlb
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4108	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{B94D6711-92DF-4B21-B5B8-CC3A4E1F9DED}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1888	msedge.exe
1888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1608	2240	msedge.exe	85
PID 2240 wrote to memory of 4108	2240	msedge.exe	86
PID 2240 wrote to memory of 1032	2240	msedge.exe	87
PID 2240 wrote to memory of 1032	2240	msedge.exe	87
PID 2240 wrote to memory of 1032	2240	msedge.exe	87
PID 2240 wrote to memory of 3296	2240	msedge.exe	88
PID 2240 wrote to memory of 3296	2240	msedge.exe	88
PID 2240 wrote to memory of 5072	2240	msedge.exe	90
PID 2240 wrote to memory of 5072	2240	msedge.exe	90
PID 2240 wrote to memory of 5072	2240	msedge.exe	90
PID 2240 wrote to memory of 3704	2240	msedge.exe	91
PID 2240 wrote to memory of 3704	2240	msedge.exe	91
PID 2240 wrote to memory of 3704	2240	msedge.exe	91
PID 2240 wrote to memory of 4980	2240	msedge.exe	92
PID 2240 wrote to memory of 652	2240	msedge.exe	93
PID 2240 wrote to memory of 4980	2240	msedge.exe	92
PID 2240 wrote to memory of 4980	2240	msedge.exe	92
PID 2240 wrote to memory of 652	2240	msedge.exe	93
PID 2240 wrote to memory of 652	2240	msedge.exe	93
PID 2240 wrote to memory of 2972	2240	msedge.exe	99
PID 2240 wrote to memory of 5012	2240	msedge.exe	100
PID 2240 wrote to memory of 2972	2240	msedge.exe	99
PID 2240 wrote to memory of 5012	2240	msedge.exe	100
PID 2240 wrote to memory of 4696	2240	msedge.exe	103
PID 2240 wrote to memory of 4224	2240	msedge.exe	115
PID 2240 wrote to memory of 4832	2240	msedge.exe	116
PID 2240 wrote to memory of 468	2240	msedge.exe	117
PID 2240 wrote to memory of 3400	2240	msedge.exe	120
PID 2240 wrote to memory of 3400	2240	msedge.exe	120
PID 2240 wrote to memory of 1888	2240	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-lgp2hp.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd1540c188,0x7ffd1540c194,0x7ffd1540c1a0
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,7494975003070229179,9376048252374212319,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,191865389890718237,5051824760294674559,262144 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,12352618305089387267,2755209051342791180,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,6366012515717638766,9894523794180279567,2097152 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,10786304524524782398,2700731695822774247,2097152 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,8398731166913623587,9114667141630265403,2097152 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,15750039159025941758,7295075953101815163,2097152 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,15927405974768504359,10365285676229198582,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2698863190995474932,16751828662388871729,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,7901112727136200601,3495250084516726146,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,7901112727136200601,3495250084516726146,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,6453635299653303369,16700958788772362026,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=1644 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,3073297767919668003,12939459193910018506,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,1687606658680598339,2395000305745013157,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,6539098503825461610,2344058222912023287,524288 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,15082669173917551923,5571372596356319554,262144 --field-trial-handle=2280,i,11106523676489986461,18292728394738377007,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1888

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05809a26-ca21-4d4f-bab0-4d9f893764bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05809a26-ca21-4d4f-bab0-4d9f893764bb.tmp
Size 18KB
SHA256 468856aecbdf55abd594fd6d19d104e7ce03d22d0fc236bb25977b7abb4df873
MD5 b5cb54ccefc6965749aa95c06afa98d1
SHA1 5ee7966bfcd027e27e63e5e4468397e9d1912f87
SHA512 6157a27a8ecbd2ffd4f2090a33c2d8567661dbd99589ae9bedd4f0fcc77feab416a14abba69f54415cb9d42a05f1a38db36c2df0b689b257e2460ca8506f2b05
SSDEEP 384:eZcIhsNI6w+DLhRyOjTVSpOsG5bjkMatgOIwZOy+BoJ:chmzRnAOrjkMaXsXW
TLSH
T15C828D725C785DBB5DE6A145F58B32034FB89067E5C56F80D4ECAB1C01DA6AC130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

123a6762-982c-4bea-8e9e-ea32d87fbb55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\123a6762-982c-4bea-8e9e-ea32d87fbb55.tmp
Size 18KB
SHA256 656b0fb5e3f0c6e817a325257b713ac7fe068b4300af42a03a9d7d58462fb217
MD5 b0f13f1090776983545347bd2431d19c
SHA1 5bbe5dc80cda65862d7afd1515e9dca699e51921
SHA512 2a7a3fb3ffc2bfe5a7339b8d8ead6ce5bab691bce13e4815668cd25260ec7343889d605cfc3c405803fb13e89e8827c0e52559ca1e42647d3b022702bd65a13f
SSDEEP 384:RZcIhsNIrw+DLhRyOjTVSpOsG5bjkMatgOIwZOy+BoJ:5hdzRnAOrjkMaXsXW
TLSH
T12A828C725C785DBB6DE6A105F58B32034FB89067E6C56B80D4ECAB1C01DA5AC130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37331a79-9272-4223-b35e-a6bf41aebbe7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37331a79-9272-4223-b35e-a6bf41aebbe7.tmp
Size 8KB
SHA256 36a9a726bafaa73def199117f1565d236ea40f537d6e90c48db07d0d6cd8efa0
MD5 bf5a9986070a60d668bcd520cdd51ffc
SHA1 a578caba3b4200117c52c12a92a5b2b554617a48
SHA512 e7583135c1a1e529f553f50f40329b40b017c9f1c3a6642ba09c850fc03700161b2853bc82d8d427a0bb7ac668109773bd175027a50ef34ebf6bda173ce04d5a
SSDEEP 192:SOND6ygpQmiUycntOCTVgFpOsR0XzPZBSU6:SOND6lHptOCTVSpOsGzqU6
TLSH
T1B402C734B8682CBB8DF3AE45F48B37139FD4106BD9552B84DAE81E1C01D766C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dfe5a72-3b2f-427c-8d1e-714c88bead59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4dfe5a72-3b2f-427c-8d1e-714c88bead59.tmp
Size 21KB
SHA256 1807f0a58a10b63cf7632437eea4ea4a1adfe2050124bee1750e27ea4754759d
MD5 597bf4e9ab564eacd4d3360590eb314f
SHA1 3d6275695e9c839a64794039bf201ff95f392571
SHA512 0f5c46e2c662b314adb6634f6190222ac0866d5e066db9c98fd01627e1f48d5a3a89254225bd2588cb7825a443aaa0597f7514be1cf0bc96ce7565e6dbc8d687
SSDEEP 384:SiFiZcIDzsN48TUNTUlIl6w+DLhRyOjTVSpOsG5bjk4atgOIwZOy+BoJ:ZFQHdwg0zRnAOrjk4aXsXW
TLSH
T197A27D734CA48DBBADF69A44F54A32038FB450B7D585BA90E6DC9B1C019B1EC030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

34d1bf21-ce92-4389-8c3f-93b76412b856.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34d1bf21-ce92-4389-8c3f-93b76412b856.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

352f86af-1b65-4d7f-bf09-47310404256f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\352f86af-1b65-4d7f-bf09-47310404256f.tmp
Size 27KB
SHA256 b3c2ba3f6d17524a0395bc69a0f55eea2a8c6c4a78b0c41a1cef1f4afe5b0fac
MD5 eb22dd4973f188aff83ccf74148fcbf3
SHA1 fb1431694dafad22e8e95df9237341548512e06b
SHA512 d911cce6a347737053e5f389856316dd4f6217775c63b26ecdac32a98d24867b19060c8f08fef313f21422811e402a3441b67a83e46e28e310fa5155fdbf7bd0
SSDEEP 768:SgK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3droZ+KQ:SgK9uzYWvcQWsu1ja0HL7Q3WZ+KQ
TLSH
T1A2C2F93F640CCB7E4FC01A9DDC5A6F963E9802D7A6688D4047FA984C02C77EE52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75ccdbcd-cb00-407e-b7e4-defd0dfc66e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75ccdbcd-cb00-407e-b7e4-defd0dfc66e7.tmp
Size 9KB
SHA256 663c962d75f20a37b8e2f5c98a8875a7118cba094864796ec042092c43034911
MD5 bd8192764b70057f89cb1fc19b283c21
SHA1 23e965c54557de543bd854a7c2cafe06ee1a7ed0
SHA512 fac6b7e212ea759c31ca4e4b3d33c14b40d76da19cd9bb6723d0766be8aa0cd6fcdec0b1b2b1b0bb8107f42df7139669d0c6c5b2cac3f7fe0af232b384b60307
SSDEEP 192:sxZmRbWD/fWsc3IdpdZHW6+WNGYRPRYVZIgrJ:sxZmAD/fWscYPHbGmY9
TLSH
T10A12B8526E28A97B8CC7D20DBB25BF53D6F95032A1D11E58EAFC961C05E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f489258-1b15-4f06-b2b8-74eb663ca1fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f489258-1b15-4f06-b2b8-74eb663ca1fb.tmp
Size 9KB
SHA256 369c97d17bddb52e4db43a20432cf33ad44f3a169c971a160fa973fefaa4aed3
MD5 80d771a33e6b7b30d02da39640fee182
SHA1 118d0ff7da7fde9d0db6a077863ba80871f1d69b
SHA512 b1cbfaa1844c333c076f0ff33de2a4caa293a359ec974b3c4a7d973694906e2ee8e3190d4f5a4edac8ccca9fcafccc4c44b8cfc0cdd6f379fc9a45bd2b5bcbc6
SSDEEP 192:sxZmRbWD/fWsU3IdpdZHW6+WNGYRPRYVZIg5YJ:sxZmAD/fWsUYPHbGmYC
TLSH
T1CF22B7526E28A97B8CCBD20DBB25BF53D6F9503291D11E48EAFC961C05E6ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0a6595313fcf4a1099a99869d8d54a7a8c621a7008582d2dc1edd1c420f555b8
MD5 976b50909bec2bb9e8ce79a9b1e84d00
SHA1 8eef2c88f335afefa86e7e34638b3bf7853f4172
SHA512 54ee5a510a7631e8de11256847d0b2be95907c61e58808bae69b44c02c51f58c35192a4df1bcd77e7dcf09068eede65eca2728b7861073042e7e7bcb827f0c8a
TLSH
T13361C68255440E69FFA8D97889FE27873635A58124872EC250ADECFA580EFD5E33037C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ac941c8c2053070bae245dd5cc7ab4c04e6f74c31c0c6435de8391a667845c1c
MD5 2b4cd3251064ad14fdbc924fa1624af0
SHA1 f80c5b5027b2cdcd9955be606fe587421a29e5b1
SHA512 f3d3d0046cf94ef439099c4de6c97f08ee77885b1d456a6b78b41a9875fecc1b216bd47817f002311bf1c1d1d5dca98953ef91102a92c473913726efa5e4f639
TLSH
T1B361C68215440E69FFA8D97889FE23873635A58524872EC2509DECFA580EFD5E37037C
MD5 SHA1 SHA512 TLSH

Submit Download

dc0365a3-838c-484a-ab35-472039f0a8b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\dc0365a3-838c-484a-ab35-472039f0a8b7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

52416c92-9aa5-4bb7-9ef5-3253d8868da2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\52416c92-9aa5-4bb7-9ef5-3253d8868da2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9991b70d-9365-4089-b4a8-e628f1c72d3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9991b70d-9365-4089-b4a8-e628f1c72d3d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

de7a43ed-0338-48e3-b407-c3ac6b4f67a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\de7a43ed-0338-48e3-b407-c3ac6b4f67a3.tmp
Size 949B
SHA256 c352b258fe76afb7aa7a116aecd9bafe7ecea77d47cc273cb7dea257b8264e34
MD5 2d884931fde335e1bbfe031aa27ed8a8
SHA1 74944be711629b8ded58e8842815495d424c80a5
SHA512 5ce4b54f48a12c188eb1702d3106157a2e509514487676b265f3483df1ed46e07570f7a1f665f995622fa9cde460aa884bf179b68937df25fc13f50b08c2b3fe
TLSH
T1EE117DB3C3D585AE891516F05A24AE2BCE2D0606421C7D5985D4EF6B93F3475E00259B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 16f3697fffc1fa8c9a53b2aabdfb59ce1ee6373f44aa42ed0dfe0bb0162c9792
MD5 cf71c9acd6de5b9e0463a043ccca0e15
SHA1 3af89b267491f424ce5b989e13b3708f6f5ac5a1
SHA512 078d5dcdd7e2ec2a5f01f7297759a2f67344d814f1a6630db02afc855aa3ab17e08946767b18cc5c01e5dbe0b0fb8ec79c7b26d8aab1a256942f154c143e7147
TLSH
T1AA31B25839AB561038BD3D1C41E899AB129131B2702CE56E3FB851B15EAAE414DFECC9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 b392fde9fec671f767f5791310e50ed507b0790dbc57fb53ece7c9af9071b8c1
MD5 140bbd24663ad4b5bc01ac95ccb55bf3
SHA1 a9880bef64e45ee2309662de55fec1925f194724
SHA512 9d8a467cb55362d7ac105c9cc4ef50d0e9794970e6519fccc6c9e31482018537e2431a240b4a30f9f90c119ac5a26f4b8b260cab86690ff9c942e56c0ba1e0d1
TLSH
T1FD41D35839AB571078BD3D2C41E8D9AB129130B27028F56F3FBC51A15EAAE414DFECC9
MD5 SHA1 SHA512 TLSH

Submit Download

af7cadf2-a47f-44a7-af77-c86377100a3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\af7cadf2-a47f-44a7-af77-c86377100a3c.tmp
Size 10KB
SHA256 12c62307c3fdba377e11ef32baa4e1d47abb18fd4b42bd2424e65b420b4a9c1c
MD5 b0c7bcc88d46073f1a11a8cc662f90f7
SHA1 7eb85de1b452422658e1542c4106f228150e90a2
SHA512 8e49eaf29173bea8f8aadcb5b6fdcf21e8d52da3619f990662b5f9618e0645c5989ee1adad5b983b0df3e02600399859ab6a96b45d571077b3293a0f461c6231
SSDEEP 192:sxZmRbWD/fWsjU3IdpdZHW6+WNGYRPHYVZIg56J:sxZmAD/fWs4YPHbGmaA
TLSH
T1D622A7526E28697B8CCBE20DBA25BF53E6F9503291911E58AAFC961C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8d155a2-af09-4fc9-a6e5-fe2e1ef15549.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8d155a2-af09-4fc9-a6e5-fe2e1ef15549.tmp
Size 10KB
SHA256 66f56bc97b50e970fabb2fe22829e3b76bc9fa2d83308f8c7721b09105cb6ec4
MD5 82c3c7613575984807da8d6567c163e0
SHA1 a0f4e59aea00e8764c9d0e18d16ac866f7fafab1
SHA512 0ad91689e1dfb2b3be58f57dfc232e5f0f505ce286a5d6f8392948af74b38d75cda47c03292b2840dc37f43730dca62acb058212ab72511073e5a6432e5921ba
SSDEEP 192:sxZmRbWD/fWsjU3IdpHZHW6+WNGYRPqYVZIg56J:sxZmAD/fWs4Y5HbGmpA
TLSH
T15122B8526E28697B8CCBE20DBA25BF53E6F9503291911E48EAFCD61C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cf44fe2-7e5a-4583-9041-670b2accc08f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0cf44fe2-7e5a-4583-9041-670b2accc08f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6e356c1-bd83-40b3-a1b1-0061592f131b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e6e356c1-bd83-40b3-a1b1-0061592f131b.tmp
Size 8KB
SHA256 49d3adb34f48eb488e167ade54acaebfb8ad12e175a87b40964f18c1e9c38fb5
MD5 f21a03c7f6e39bc5685dda2e967fbaee
SHA1 c185803017da73182cd27922368844fd57eeed7f
SHA512 8c70e1bb6a1934855b3dcd966f91d12668ef26c7c71bb3dbd99eefce6a9d946513c28550ffbbbe69e20d4765e5c441ff28471cabe98c5259af1fb7f274d75457
SSDEEP 192:SONR6y2QmiUyYnuOCTVgFpOsR05bjHEX3UVqTrU6:SONR6l3uOCTVSpOsG5bjkUaU6
TLSH
T1FE12197178786CB75DA2A545F48B36038FA84167DA453F80D5EC2F1C02EF6AC234BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

958cacdc-43bc-443e-a42a-9d6562794c30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\958cacdc-43bc-443e-a42a-9d6562794c30.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a10dde2f58e713ff443a81e8ddf8abd11ede41c775f9146a6d36e965d8f0c0c6
MD5 f77ee0bec15baa1f1a9b59a256079dff
SHA1 78b13dc91683dffe464fb8800f9b53c66116486d
SHA512 b2f3ac6c374ba20a4aca446ab1d459e9b78a17fa9945e34bfe6520577d5b9a7c06c0796844615bd72762ee715ff3a68e228d0d3be2aec2eb87af925a4374926a
TLSH
T1CE411898A6FA1148B3776F5AAFF7A45E487BBD772E0AD59E00010E4F0666B00C871737
MD5 SHA1 SHA512 TLSH

Submit Download