ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 08:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-kylr86.html
Size 116B
Sample261002-kx44aaee35
SHA256 ccde54317343ebacd6da2afde0b4007f766b637b1ba34510c74de49797553d77
MD5 0e2f15dcf7166552e959f0ddb363e706
SHA1 642e84dc85171feae5dbbb9727736ee1424a232c
SHA512 2a659912d4f25102f996a71566eca6840ac2b3271147c266d9836f2fc5785b4b514e248b396d62b7504556f50046f7610023adc8c55c2c9b9a8ec715c29ce525
TLSH
T122B0125F120702053D601D527DD3375714174B9E01A969E01267C9FECCCB9B2EE4739C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{BA8C907A-ABCC-4B26-A2E2-12C8E6EDB2A9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3064	msedge.exe
3064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe
4608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 1076	4608	msedge.exe	86
PID 4608 wrote to memory of 4128	4608	msedge.exe	87
PID 4608 wrote to memory of 4712	4608	msedge.exe	88
PID 4608 wrote to memory of 4712	4608	msedge.exe	88
PID 4608 wrote to memory of 4712	4608	msedge.exe	88
PID 4608 wrote to memory of 5016	4608	msedge.exe	89
PID 4608 wrote to memory of 5016	4608	msedge.exe	89
PID 4608 wrote to memory of 4916	4608	msedge.exe	91
PID 4608 wrote to memory of 4300	4608	msedge.exe	92
PID 4608 wrote to memory of 4916	4608	msedge.exe	91
PID 4608 wrote to memory of 4916	4608	msedge.exe	91
PID 4608 wrote to memory of 4300	4608	msedge.exe	92
PID 4608 wrote to memory of 4300	4608	msedge.exe	92
PID 4608 wrote to memory of 3720	4608	msedge.exe	93
PID 4608 wrote to memory of 3720	4608	msedge.exe	93
PID 4608 wrote to memory of 3720	4608	msedge.exe	93
PID 4608 wrote to memory of 4168	4608	msedge.exe	94
PID 4608 wrote to memory of 4168	4608	msedge.exe	94
PID 4608 wrote to memory of 4168	4608	msedge.exe	94
PID 4608 wrote to memory of 4276	4608	msedge.exe	103
PID 4608 wrote to memory of 4848	4608	msedge.exe	104
PID 4608 wrote to memory of 4276	4608	msedge.exe	103
PID 4608 wrote to memory of 4848	4608	msedge.exe	104
PID 4608 wrote to memory of 2440	4608	msedge.exe	106
PID 4608 wrote to memory of 4396	4608	msedge.exe	118
PID 4608 wrote to memory of 2440	4608	msedge.exe	119
PID 4608 wrote to memory of 2372	4608	msedge.exe	120
PID 4608 wrote to memory of 1952	4608	msedge.exe	123
PID 4608 wrote to memory of 1952	4608	msedge.exe	123
PID 4608 wrote to memory of 3064	4608	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-kylr86.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x250,0x7ffa2243c188,0x7ffa2243c194,0x7ffa2243c1a0
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,11359516075697678552,7802742539654586766,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,7310037804651601216,12313989308598144109,262144 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,6129660365961423526,16692849394855779459,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,15954456690411331797,881577666338918216,2097152 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,16208699164589896105,14768920324323783633,2097152 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,17062424465012421406,4728187043678794449,2097152 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,1762304981280246351,479308019145274578,2097152 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:2
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,15780897932092947950,8141931742370912268,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,426428639871579380,13046813225270991706,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5659979937828788824,7615622729581369639,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5659979937828788824,7615622729581369639,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,12064236440057941397,978744990706846826,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,15485369045126982052,15703899365698087291,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,14391970770903625076,18039415760471968886,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=772,i,8806020569795565447,5492575362406181716,524288 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5148,i,18036543757450358592,11692214506577691006,262144 --field-trial-handle=2316,i,4213122108211138816,7543224992083241198,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

154ff8c8-3dc4-427e-929a-7c0f3ba77e2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\154ff8c8-3dc4-427e-929a-7c0f3ba77e2b.tmp
Size 8KB
SHA256 1037682b39ae2df334247cd97a183d2a4521889d04ca748d5880327ecffe0129
MD5 c747426ee1204cc2755ff6e23b8b4ac3
SHA1 a92bd9d29d392ecd4c47bbe6fda5e97edc04751a
SHA512 b5733577d2c828a5cae652f1d6b027361e7c31b6ec1751ed2d29a4c71e1f7df5f20d86d6ded20bc1c6fa9735fbe0906a60721ef14f9b1cadcc19fafb13183c20
SSDEEP 192:LONm6AmwprQmiUypV6siX5FSY+U9JiLaU6:LONm6ipd46siX5FF+Uq2U6
TLSH
T127020B35EC686C7B8EF2AE15B54B3B239F99113BEA941F84C9E81B2C01D765C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4758e8ef-d449-40b0-9e97-9858a49013bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4758e8ef-d449-40b0-9e97-9858a49013bd.tmp
Size 18KB
SHA256 73ecf62aaa29cc137963de1c771945d03e1baf24e62ff9ea434e64a7752ba57c
MD5 fa904a3369318e66dba42a99c9d2a0fc
SHA1 2db7c8263ddc9a640cbce04449b8f5ccdb2294f6
SHA512 7d21b6bc5451be48e216e98d0e0bb680564874e24ab7d15920341212316c48f1d3e988a500ed9d43090780edc98f8006a9055d3ce903741a0e4c25742157d545
SSDEEP 384:3ZcIhsNlCND7ZpuyZ+9iX5FF+Uc0nKtgOIwZOylHo4:/h1ZhqaZBhKXsAb
TLSH
T157829E76ACB85DBB59F7A150F5873A034FBC5067D6C99F84D8ED272C06EA598030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4eee06de-26a9-48cd-87d5-f00b643034da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4eee06de-26a9-48cd-87d5-f00b643034da.tmp
Size 18KB
SHA256 bb774c8a86ef526e499717577df54d8c108f8d16408659f241cbff971c238a10
MD5 7e39cde2a2769089c8939dae38375797
SHA1 1b3dec432aabbee552b140990092c006dce2fe51
SHA512 3d9accdcacec7aa5e0ac7eb23f950caf48a213e3d957ea8f3c57f30c28919308711da4d7c8b81d857b037cb99542276c0c5d9e5ba5d28ec71a4711323e2935fe
SSDEEP 384:FZcIhsNlPND7ZpuyZ+9iX5FF+Uc0nKtgOIwZOylHo4:9hKZhqaZBhKXsAb
TLSH
T1D3829D76ACB85DBB58F7A150F5873A035FBC5067D6C99F84D8ED272C06EA598030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b768954-d65a-4ed9-8ddb-007b191c3a58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b768954-d65a-4ed9-8ddb-007b191c3a58.tmp
Size 21KB
SHA256 2a932dca07aa12ac8c482e93b045a4b88417ae263f05356a8904107f4be987bd
MD5 0a1594086f25d2a9d02182470d0c7301
SHA1 41b4bfcecac2463e1234d37465f2e8f27933d471
SHA512 3a4c8b75760bbb0ed819a7100dd7fa0540b46cd2d09d8747234d187bc15fbae7ec06db95b13d534c5618da4cfa9986cfc0f90dab1f8ee27b95e0aefbf6df9d42
SSDEEP 384:YiFiZcIozsN/8TUNTUlIlPND7ZpuyZ+9iX5FF+UcPnKtgOIwZOylHo4:jFQUewgPZhqaZBsKXsAb
TLSH
T191A27D739CA4997FADF69A40F54636039FB84167C5D5DF94E6DD5B2C01AB0D8030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68266359-3ade-439f-b530-d0675cf282b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68266359-3ade-439f-b530-d0675cf282b0.tmp
Size 8KB
SHA256 4dccf728a744a23652f6cd7ad75d5b34be7eae488a10165c1638b0575e8bcbff
MD5 954bc4c432cc8272a216b1a8e26b5b2d
SHA1 a8ed0d0dbe996ee8b3788f36e97239439cda1c72
SHA512 3ae6d9dd9fc21007b85f99855f45445e77fa1ea4aaa818136546298673cae85ecd48e2aace07628024baabb90ff4d6129a04de609b3435e22c39b847cf6fc17f
SSDEEP 192:LON46Amwp/QmiUyJV6siX5FSY+UcXe2lRUqlKU6:LON46ipB+6siX5FF+UcJnKU6
TLSH
T14A122C36EC786C7B4DE3A550F04735135EA91227EB896F94D5EC2B2C06EF59C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

18733c22-5c17-4ba2-b66b-0f389a3b1430.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18733c22-5c17-4ba2-b66b-0f389a3b1430.tmp
Size 9KB
SHA256 79de660ad052712ce0eca665d3f3d9bf9ac228971fe64124190ce09e82f26a7d
MD5 8c67fb7f0d6cec9494c40f133f0fd59c
SHA1 0ec56051f96e8c7208838c2030d31f59ff1cc2f6
SHA512 9963ce4a1819a267e84e471e8d0f9439d872978ecbeffdc3f4049429c0e3fce7c4b5557e2356765ee44a6392c29e758e08fa7fd4665a4be65d6e999298da766d
SSDEEP 192:sxZVRsWy/fHsjNlTIdpdUHW6+WNGY3R7MIg5EJ:sxZVdy/fHsjnMKHbGjO
TLSH
T17022C751AE38A57B8CCBD21DBA15BF53E6FD5032A1951E88E6FC8A2C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28a3550c-2c9a-4606-b9db-b187afbc0f9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28a3550c-2c9a-4606-b9db-b187afbc0f9e.tmp
Size 27KB
SHA256 a9ea2a288e1635fa7ecec9056d66bf2902f964fe3e4496ccc5b51e9123b369e5
MD5 ca0c87b64410105e59ccba547e9b02ea
SHA1 cb941346e3d46ea74a5bc40c79302c345e6d9497
SHA512 33837984dbb5d34df746c78bcf1d762fe10aaa7830590ced82afbaa6dfbbd14ea0e0e83e3a0f7f03531de9c219976d34c4f6a235343a6195cd499346e0e75716
SSDEEP 768:tn30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ726rolZMg4:tn30AbSWvS2l9u1jaLmLZ12xQ
TLSH
T197C2EA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA984C02C77EA91274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51d9c9cc-0c5b-4230-bb6c-2dcaa51a2f80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51d9c9cc-0c5b-4230-bb6c-2dcaa51a2f80.tmp
Size 10KB
SHA256 34cec565ef0e5c596f2c583651768817307733002ccf87a76afb03f10eaba5df
MD5 09d4eb9bcd824eb2014fbf24b3ea6f1f
SHA1 d7a7abc1abe205f3145764d1b651355f26c22d02
SHA512 607a640590eb92d1367936954c47cdd221400d9975eb015cf327ed4eaded095ecefbb2bfdb152f0bd4ee17b0f0ab009efccd574372ecdd8ebcb6f84fc83b8820
SSDEEP 192:sxZVRsWy/fHsj4lTIdpHUHW6+WNGY3gr7MIg5mJ:sxZVdy/fHsjEM0HbGY8
TLSH
T15C22D752AE28697B8CCBE21DBA15BF53E6FD503261951E48A6FCCA2C05F76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97142f41-438d-4f8a-9f09-5b44b48c90d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97142f41-438d-4f8a-9f09-5b44b48c90d1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 082f0fb4c0493ff178840053aa0d8879df1d3b30fd76bca2c961494e00926754
MD5 d65c802139b2cfbda5e0342c2c224bb7
SHA1 ab4198f11500547ca76d460a14b0d09e56013889
SHA512 c64bfb984600e6ad5ae0c2b0b30968ff2eae097e127edede380f7921c584ee11750717f4da944e2099131d50fb99b60fc10ca04bed460370a9f4b7e65a76ecc0
TLSH
T15B6193A949E05A50FBA04C70AAFD32433B3B97F147C34F820954E978D619F3130D6E82
MD5 SHA1 SHA512 TLSH

Submit Download

1a67ff36-64e9-40cc-b783-9f95e096bb70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1a67ff36-64e9-40cc-b783-9f95e096bb70.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

160cefd7-3d68-4480-abaf-1c2018ae8381.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\160cefd7-3d68-4480-abaf-1c2018ae8381.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

5200d7ac-808e-482f-a6c1-dcdebcf62d71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5200d7ac-808e-482f-a6c1-dcdebcf62d71.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9ffb9f3c-f1fd-481d-ad12-36bf7988ae2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9ffb9f3c-f1fd-481d-ad12-36bf7988ae2a.tmp
Size 949B
SHA256 acf22df601b989b6b5114a6b0196096920ec7ff4e1e479a72cf88900f65dc384
MD5 071e02fbbf268babdb0a5eebdb72d5a5
SHA1 7c483337961d93b1c5c04da3aed1b683a8cf0995
SHA512 ea18acfe47a4019edd0c7898e4d35b532d95221a50eca74853a10f9afafb8e785b05e97a9c140e5e74d7f1a0e59c6fbfe9703235fea1e2ff467fc0f07c6991d5
TLSH
T1C1117AB3C3D585AE891556F05A28AE2BCE2D0A06421C7C1989E4EF2B97E3075E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aed08656c29166191f84c0412c7f30616bdacecd5bddb0c417febad6ca9a8785
MD5 cc28e994cf37a6c0a1b67f701c830b93
SHA1 300ffe6143053f756e7e4f4026d004d160e4ed29
SHA512 3c3920b8bb4398776860a35f0d20533adf745aaddb38c6253ef77ae72583e300b7d45edbc0bb4cd26bd1b14a99f48e602551b611a43262da0a3a3178f5643093
SSDEEP 48:KA5ItKSgIPylrIVKMU4NpGPjxTvDG/syIn7DKoagND0ZTtU3PAy2ynGyU0F:KA56KSgqurqKMUTuoKnq6E
TLSH
T1B4914313756B06813C7E6B1C50E6966A429239B37018EA6F7BFCC1A15E2BF444DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc98aeae-0f78-4e90-93b4-240d695aa1e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc98aeae-0f78-4e90-93b4-240d695aa1e0.tmp
Size 10KB
SHA256 80c3b44c475ed49cc1dc8f23f749c515f70732e884956a31c2b1748dc01d02c3
MD5 ba3844cbb48546ff7bcfb0b8cad42fab
SHA1 02d3f6a7bed409c27c4db18273c64e68f35027f5
SHA512 6f6adb219f697eff25239068085662d13e45d2d3a4c03aef762f3bafcdbf8d8a3921508773c0a1ea06b7a3f361c49df431a5f7169ba38da1f03dfbdb9f761f45
SSDEEP 192:sxZVRsWy/fHsj4lTIdpdUHW6+WNGY3is7MIg5mJ:sxZVdy/fHsjEMKHbGZ8
TLSH
T1CB22D851AE28A97B8CCBE21DBA15BF53E6FD503261951E48A6FCCA2C05F76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e534c35f-2371-46c2-9856-988d60cf8bf4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e534c35f-2371-46c2-9856-988d60cf8bf4.tmp
Size 9KB
SHA256 acee8bcf71835ac3400bb8a7d69d2b74860dbaa64687b2303619091afbe0a228
MD5 d718c815dc25c476cd023747960418f3
SHA1 58b17bc3167883a271390ab8ec0b35390fb55d50
SHA512 04a96bbe78bd79f139218a7db56e18f9af8b09ea54a3f86fb60cdd0ee2481a042e04660974056cd5fe1748efd3b58138c25e660ce8793d1caebe4f9d20f38091
SSDEEP 192:sxZVRsWy/fHscNlTIdpdUHW6+WNGY3R7MIgrJ:sxZVdy/fHscnMKHbGj9
TLSH
T1C422D851AE38A57B8CCBE21DBA25BF53E6FD5032A1951E88E6FC852C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffd9e12d-7b68-4df1-a38c-5206241e0554.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ffd9e12d-7b68-4df1-a38c-5206241e0554.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16a69877-2687-41da-bb56-e7dc9c805c7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\16a69877-2687-41da-bb56-e7dc9c805c7b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

1105c597-78ff-4068-9bb4-1e33d1427849.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1105c597-78ff-4068-9bb4-1e33d1427849.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a5383c4a592eb2ab7ece9d5428ee2ce9efe821f368655ad7b3492df173cf9bc1
MD5 9bcbde2878723ca26dd29faec6c7a3a8
SHA1 2cb358e02f5c5dce99568f799e4abd079f95d2d0
SHA512 8d15f7bf5dde946830ed444ffe25cb941846488265158d388e25749171e13fee967cfdbdc534dd05480f9e410f1e730c848b178e7767807dac7ab08f223b2ce7
TLSH
T14141275CA2F91148F3B7AF5AAFF7A86D447A7C332E0AD09E10110E4E4636A00C872737
MD5 SHA1 SHA512 TLSH

Submit Download