af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 07:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-fq7241.html
Size 214KB
Sample261002-js5zcax18p
SHA256 af6f2b66f13d44d2ec1a96fd2846b3339c52234b98d44fc0fc8d72eaf817bf20
MD5 ca2c96be8ad4c1b27afc858a639eb1f4
SHA1 34bcbb32e3946883cf26447531ab98af52bcab62
SHA512 3437202655e3eb3621e7f896424eace53f0c5f24acf844be2b9d563d88009e6cf5a37bcddba9c2cbaba921fa3f1b6b8b256eb36e35e548489e0a5a04be7cb99c
SSDEEP 3072:opm0WkXwgEweVFmk0RHyEoCmetxWnm6t6b9U9QfyA7cxGTdTbLayQsH:oglIYWRHyrCunm6t6i947gGTx3pQ4
TLSH
T13024023459202B0E3B9246B4B26575A40EF90CB3E95F96227BC801F5EFED1F29049CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1572	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{AC144DD7-160A-4E6A-BF86-A3570DA9F06C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3448	msedge.exe
3448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 4616	5104	msedge.exe	85
PID 5104 wrote to memory of 1572	5104	msedge.exe	86
PID 5104 wrote to memory of 4476	5104	msedge.exe	87
PID 5104 wrote to memory of 4476	5104	msedge.exe	87
PID 5104 wrote to memory of 4476	5104	msedge.exe	87
PID 5104 wrote to memory of 3940	5104	msedge.exe	88
PID 5104 wrote to memory of 3940	5104	msedge.exe	88
PID 5104 wrote to memory of 1712	5104	msedge.exe	89
PID 5104 wrote to memory of 1712	5104	msedge.exe	89
PID 5104 wrote to memory of 1712	5104	msedge.exe	89
PID 5104 wrote to memory of 3504	5104	msedge.exe	90
PID 5104 wrote to memory of 3504	5104	msedge.exe	90
PID 5104 wrote to memory of 3504	5104	msedge.exe	90
PID 5104 wrote to memory of 4288	5104	msedge.exe	92
PID 5104 wrote to memory of 3876	5104	msedge.exe	93
PID 5104 wrote to memory of 4288	5104	msedge.exe	92
PID 5104 wrote to memory of 4288	5104	msedge.exe	92
PID 5104 wrote to memory of 3876	5104	msedge.exe	93
PID 5104 wrote to memory of 3876	5104	msedge.exe	93
PID 5104 wrote to memory of 1784	5104	msedge.exe	98
PID 5104 wrote to memory of 1168	5104	msedge.exe	99
PID 5104 wrote to memory of 1784	5104	msedge.exe	98
PID 5104 wrote to memory of 1168	5104	msedge.exe	99
PID 5104 wrote to memory of 1096	5104	msedge.exe	101
PID 5104 wrote to memory of 116	5104	msedge.exe	112
PID 5104 wrote to memory of 4156	5104	msedge.exe	113
PID 5104 wrote to memory of 4080	5104	msedge.exe	114
PID 5104 wrote to memory of 3520	5104	msedge.exe	116
PID 5104 wrote to memory of 3520	5104	msedge.exe	116
PID 5104 wrote to memory of 1228	5104	msedge.exe	122
PID 5104 wrote to memory of 1228	5104	msedge.exe	122
PID 5104 wrote to memory of 3448	5104	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-fq7241.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa7730c188,0x7ffa7730c194,0x7ffa7730c1a0
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,15704678922787565042,4252046557276047544,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,15603203900382486486,9597391026554877105,262144 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,11576498720856132802,17469800422719699094,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,4941298503801857479,9921056195843949144,2097152 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,17412616053819506503,16720137063197132125,2097152 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,4971069900780188427,8020609774217166717,2097152 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,10457232366842820814,3270982117898806113,2097152 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4922271105648532339,15770417957046639694,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,15909272701712283420,14908767732493300875,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,3982644459410160625,6040807564543169529,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,3982644459410160625,6040807564543169529,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,6119438490855019185,6079127200823658299,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,7684131260629081562,15462470090993461223,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,4676036029281240406,7748175503701220214,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3152,i,5395455148724221313,10225907292151071342,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,1896997741568630958,7930477628246032926,524288 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5416,i,5950477684740564606,2423909039961263979,262144 --field-trial-handle=2200,i,13822538113253346306,1808845306951288600,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

013d5b9f-9d1f-4501-a2fa-6f85b307fec9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\013d5b9f-9d1f-4501-a2fa-6f85b307fec9.tmp
Size 18KB
SHA256 4e9bb627b31446d2dd7ef49739b6cde6c4a97e1aa6222964f1cdc874b759701a
MD5 5a58546dc7683d0932b1d507a6d78bf7
SHA1 0248743f2dc3283528a714b3412bd68ec087847b
SHA512 80b07d5218e9ad31d74dcd64ff21b50e82e84e515ec36ba4fc15db98d0b46521650f251063b90ad7bcf47121fd0fcc10245197478cd9c47a8dcc720ccdf02a78
SSDEEP 384:W3ZcIhsN9aMqdnNIL4p5u8i0+aBTVZh6DKhHKRoP:whBHILykCBTfYGHKRE
TLSH
T190828E32AC78AC766DF7A556F8473B079EB8816793CD5F84C9DCA32E02EB5940303916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17d4838f-80d4-4efe-bcb4-a428518c7066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\17d4838f-80d4-4efe-bcb4-a428518c7066.tmp
Size 21KB
SHA256 db217905876cd315815c0134d714ee3d88efafa5c1413078795e1fc06d466e0d
MD5 bc3066c1fd9ea951d34ae5ffc54072c4
SHA1 76da88d67517ea13cd34c2ee5fbf0ddf47e74a8d
SHA512 5c10df23f810a6b787743feea085a5a9c6f6b93712ba0e76fa71340c54fc7977aaa0fe10344f39fe9043f8484597a98b189e4a38069e1ba2ed9e28ce2a074cfb
SSDEEP 384:OjjiFiZcIXzsNH8TUNTUlIlaMqdnNIL4p5u8i0+a2TVZh6DKhHKRoP:6OFQDqwgIHILykC2TfYGHKRE
TLSH
T1CFA27C339C68DC7BADFA9E56F94636079EB441A7C789AB94D6CCA72D01EB0D80303D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c5da9b9-0713-412d-8339-78a1a375bebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c5da9b9-0713-412d-8339-78a1a375bebe.tmp
Size 8KB
SHA256 d56cac01a4a557cb7594fdc5773fd5a7a15bab1324d9d600d9da3b25dcff767a
MD5 2cac0b96509ab7c8b635b83a96f56d92
SHA1 145b3e97f23224f8d9a3e75e7b94563852d8b385
SHA512 9c18ef709f872e971bc15b6deff8b747a47c456d21c4d00893795b7e76d8e2b06ae245d0c630ca5b4b25b638d51bbbe76a10dfdad6995f7741212b1fd2e8a71f
SSDEEP 192:SONw6iD3QmiUyjp90q5u88PA9+aluZhq2U6:SONw6Qif0q5u8i0+a8TU6
TLSH
T16C123A36B878BC6B6DE39965F44736239EB4426BD7886F84D9DC272C02EF19C1307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d9bdb63-e325-4756-bdec-5dcefdd239cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1d9bdb63-e325-4756-bdec-5dcefdd239cc.tmp
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c5d2e3a54f03904bbe55eebd2e15796e5b26d6e7120a6693c971408f22102794
MD5 4656163abf32e5ab1a0774c2d3ffd3c0
SHA1 7bb2730f110962fe6a55dcf63196da9d74635fdd
SHA512 2096bbc1475260d24baaa9e51217bd19dd5edfd500aa9c96f8c9ec0510a31f436be7ca6a34af3ec2478245bbace0f09d84f152f56ad9a37ae2441e8f22301bc7
TLSH
T1C9D08094D4B47AF8F035313D5136450177CCDF96F603235A91454956C8501C309F1DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

09d87eb7-c7ec-45b5-9f32-2728d9203f9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\09d87eb7-c7ec-45b5-9f32-2728d9203f9c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

1d6f67ed-561c-4171-bd3d-9c4a76788011.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d6f67ed-561c-4171-bd3d-9c4a76788011.tmp
Size 10KB
SHA256 8cdf6ac8a0c12bb87ca9cf5336693f5acbb035de25400b019ddac5347d0fe669
MD5 14fb07b141fa85a1cb0d41611a522c53
SHA1 1ec05dbf8cd1d047a5af354083481e9a1946fd71
SHA512 9523f78b56cd44474b509d488dbb93677ef4ecb08786a1ed318c83a42605d29f07687c702953a678764520ec1b6fb56669da1ac28d2ae7ff7efee5fd442177f2
SSDEEP 192:sxZNaRJWyE/fiqse7zwLIdpHuHW6+WNGYalN1zIg5oJ:sxZc2l/fvse7zVOHbG9a
TLSH
T1A322C7526E28A97B8CCBD20DBE55BF53E6F9503251951F48ABFC862C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54c5647a-a205-4bbb-90f5-72cbc81b0ac3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54c5647a-a205-4bbb-90f5-72cbc81b0ac3.tmp
Size 27KB
SHA256 5cdb321a93ea0b0d042e2eb9a8d431e8faad1f2fbff024f7969a3dcf38e9e9a3
MD5 a7d6e88bcd10f094160c4a55a60f7de0
SHA1 57292dfab3e607a259f837ab7965534a1d2ecbd8
SHA512 5d2b0a0429d03d530a7bbb8d67248d372040751d390a4bf2ac08d05832da3a840732481afe087b4c9369135478a5256625117d255f3c85a46955fce111df2342
SSDEEP 768:OLyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3VrozZUo:OLyQRbrWvvlpZu1jaXKLf33uzZUo
TLSH
T115C2E93B640CCB7E4FC01E9D9C6A6F976EA802C766588D4447FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69e0efa8-dc0c-418c-a169-b2dd49fc3412.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69e0efa8-dc0c-418c-a169-b2dd49fc3412.tmp
Size 10KB
SHA256 55a5cfebdcc6ea65a42f1d81c696215ea20a3c79e5d63ae5466c7c16eb909c5b
MD5 3f15d6eddeed4c3fd77b85d33a75f06c
SHA1 db6c16551803bd16a0b5a4686ac21f8d5c82243a
SHA512 4df709bd8b833975a342955b2da829ae3684f5a4df56fbf1f5bffbb63eeb01cd398326f94d8459240ffe63d02a497e23f63bb37f8d52b3947d2280d26c1ba9f4
SSDEEP 192:sxZNaRJWyE/fiqse7zwLIdpduHW6+WNGYaRN1zIg5oJ:sxZc2l/fvse7zV4HbGJa
TLSH
T14B22B7526E28A97B8CCBD20DBE55BF53E6F9503251951F48ABFC862C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 2f3640c31b3d2292fdaa99f114583d877173ca2caa15ba4f077331b69d348725
MD5 c304a6506e38cde85b458cb3df176ca4
SHA1 2ef9541992147f5f9e0f0904aa37124b14c2bc18
SHA512 c86d17745493e213a2c7244dec8ac9f728c73c208a1eed898b4f0a512de72dd48db64bee31e0d6c1f6eda50b4037e184951625a9054aaa895c61509e44fa916e
TLSH
T132E020F607C4C31D6104AD4F019C9B0C9390FA1F93C0694D2744CD487845240E2E2579
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 37b92a0cad260ab30f173e2aad1e2928e574d7380ac3694fd1ca793cbaea26e4
MD5 bf7e95d3d6b4b3fd13f61587af57de6d
SHA1 fee23b5fd74d16b3c28129bbf5710f7fdb2c49a4
SHA512 66416efc5a3d4e9dfbf696ea6e9a7051b17a6b847f1f101d458ea763719f5e942ef98a08a976940bb5417dd459ab2cd2ac1ffbf23ddb6bd7e7fe5e8ffd55525a
TLSH
T12B616178B8FCC4D5F7D8447CDBD52A8736BCEA829C979EF201A0DB78AD8AF101054046
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e6ae977b8a9ff385526593cc4811bbab230b14e8646747e420085be53d0f4b89
MD5 492556496ba4073a027af580e0b76d16
SHA1 60ba96ad29fafe6d0a846ff4c702c7ba6ba3a3a3
SHA512 6a2c6231606253913a4b59c73d5c6094662298f763b556cecc91d1482697824eb54f079e243910ea4a321174ab30c1fb3a08682bb023e971dadb76547aca6544
TLSH
T1AA615078B8FCC4D5F7D8447CCBD52A8A36BCEA869C979EF201A0DB786D8AF101054046
MD5 SHA1 SHA512 TLSH

Submit Download

006ac533-3c34-4d0f-b93b-3c7733c6859e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\006ac533-3c34-4d0f-b93b-3c7733c6859e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

18523a86-aa1e-4a02-87c9-643d6d8677d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18523a86-aa1e-4a02-87c9-643d6d8677d7.tmp
Size 949B
SHA256 f4161f9ce3f8b0e54da4558403cf9d5aa45594cd640608ccce0e2f5141e4f288
MD5 0b72dba047bf6b188d2b6526e4d3548e
SHA1 88e48307d535d28324ae574ee2919c987acb8a51
SHA512 5c96b973e94aa705120e5c38d5b9cec120b2bf9f89e2bf5344aae1b9e01757f2745e911046aedff4bbfbcc00d54e1bb467fcf0a35f3a352bfaf5ecfc61239fbb
TLSH
T102117DB3C3D595AE891556F09A24AE2BDE2D0606431C7C1985D4EF27D3F3075E10159B
MD5 SHA1 SHA512 TLSH

Submit Download

1e60978c-2158-477a-bd94-88c5d7481284.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1e60978c-2158-477a-bd94-88c5d7481284.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

396bbd46-998a-4195-84c9-342c675bf539.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\396bbd46-998a-4195-84c9-342c675bf539.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7f1e7bccf37244b137f46f422f60a12b82cb33112d4ec215d246da0a5102bcf9
MD5 3b00058900b07ad82d29e4a011d6cdf5
SHA1 59dd68249b6ea1d473190f1ea8dc8d5f68e2304e
SHA512 c188fab02c6ce78a688c45119611877bbaec6085bb1b1fca11ff7d4de50a182be37b691624e69c2a1a453874036589afe48ad13877e544d6135ae3ec567bb7b9
SSDEEP 96:K8S4K7S6aaoKnK0LELnLKLGLcLWL6L7PLKLdLKxLuL7KJLCxLAL7dLELsL1LSLal:uvfq1ViLOyYA
TLSH
T11191445135AB0600B8BD3A4884B9962F524135F33029E93BBBBC51F24F6EE454EFD6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b833e8ad-009b-4aad-95a4-1b1d91fabc4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b833e8ad-009b-4aad-95a4-1b1d91fabc4b.tmp
Size 9KB
SHA256 342cd2ac934438b9e06aa5b030a6b2e969ec788bb6881fb9601cb9ccf1a154cb
MD5 4b97b0940ce85398ac23189863742832
SHA1 d04966103465db39102e67fce8dbf216c951f014
SHA512 4619010fc0490f055b34fd545ff5862baf354123268926a6cbaec979f6a795e79ec1227af84c8ad430d02c48a3bef8c0a229b8ce462809f18e8d07396e23cca3
SSDEEP 192:sxZNaRJWyE/fiqse+zwLIdpduHW6+WNGYaQN1zIg5CJ:sxZc2l/fvse+zV4HbGiA
TLSH
T1B422C752AE28A57B8CCBD20DBF55BF53E6F9503251951E48AAFC862C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bed15e18-3c66-4f43-98bf-064673eab4d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bed15e18-3c66-4f43-98bf-064673eab4d8.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff6155f2-2838-4cc2-9b46-d16d5cc8d070.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ff6155f2-2838-4cc2-9b46-d16d5cc8d070.tmp
Size 9KB
SHA256 ac8a0cf7195ce6a04e57db98dae677c0b3d3f061a297036c1dde5606966c0063
MD5 0e2da90db694b9f228eb08c344a00f82
SHA1 c917d63e86e9dbe3e4281a3d06351c27b5c5dc7a
SHA512 8126a003725d0883ff789b73ec9ae4b055b2ece3b91bec3a07e0388834bab2618bb6e0a706b61f7a2826d745e947740df5173258cba958cd961ff86c16f3c47b
SSDEEP 192:sxZNaRJWyE/fiqsazwLIdpduHW6+WNGYaQN1zIgrJ:sxZc2l/fvsazV4HbGi9
TLSH
T13312B7526E28A57B8CCBD20DBE25BF53E6F9503251951E48AAFC862C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d87093c-0797-4ed6-b089-18183214d6d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4d87093c-0797-4ed6-b089-18183214d6d6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c3a5414d-af50-4a4d-902d-af838fe1f96e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c3a5414d-af50-4a4d-902d-af838fe1f96e.tmp
Size 8KB
SHA256 80243e4577b12fec5641b15bfcdd82642b579d46ce3130dece25bcf3a7d1578e
MD5 d47b8b1a9817ee1d5fa7adfcc5a3d70f
SHA1 823ec1c4a606193de273d66572653b711a6ca41c
SHA512 063424f1f51226a8069066e1ebb6aa3738def8123fdd0a9b9bd3240d7a79056f40a3a9854a5c291eb3b651667e860f6a49b742cf8d73bb4b1f71094e69f36c1f
SSDEEP 96:PqONkgQsjpfwDISp5ih/cIPURHl8h4otop5SmDjBfPGxvw45RxmJm78lFIxCYbqW:SONo6iDCQmiUy19Hq5u88PAgSqUaqU6
TLSH
T15402FA39AC787CBB9EF3AD15B54737139FA4116BE6941B84DAE8162C01D768C1303823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8dd48b9-275e-4376-bbb9-21c6ae99a761.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c8dd48b9-275e-4376-bbb9-21c6ae99a761.tmp
Size 18KB
SHA256 97278985fb28b6f0fc7254ce7157bc3282b6d90c3ec584477cb4a1c223b39110
MD5 b5c247c37fcba775cde2b7e105f31b60
SHA1 c563f1de33faf92461ce3176d718d984ab1d3d14
SHA512 6efe318c827459d7982dbd906f57b1d891970aa4f1f2c38bf693573c2a945c19ab907d920b3a68c921e0dc99ed2c2353cf079d09c2c710bafc7c2eecc06014ef
SSDEEP 384:mZcIhsN9bMqdnNIL4p5u8i0+aBTVZh6DKhHKRoP:0heHILykCBTfYGHKRE
TLSH
T1ED828E32AC78AC766DF7A556F8473B079EB8816793CD5F84C9DC632E02EB5940303916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ef96106-0d0d-4855-898f-7224c3fd1c0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9ef96106-0d0d-4855-898f-7224c3fd1c0f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8ffb0e21bd504c1c127d9e6d09f00099ce6fdad1b1dd9148b39192e3eb489486
MD5 4b5263622dd8444dd4b96364b2cece6b
SHA1 33caf2d6f50d1f0e4c4337e8f58350419337816a
SHA512 07ed59f626eb8dfb122e59ed94c72436a08bf05811267c6c3d93f2fd7f9e385851912a9d37750fb564e2a03cde5dbd17e4c3a1342c322a1a70add853a9a271f9
TLSH
T13D414A58A6ED1148B3B77F569BF2A86D487EB9732F0BD49E10110E4F0A23B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download