11c73ab6112a853e0930dc971f1fdf1be961a01132e5517c4069c7b31fb31d62

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 10:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/IntegratedOffer-Pickle.html
Size 4KB
Sample261002-mlny2azybs
SHA256 11c73ab6112a853e0930dc971f1fdf1be961a01132e5517c4069c7b31fb31d62
MD5 de86492c97e8d6a1fb60760c7a539a25
SHA1 848a17f2882e46f38164cc23ad7183fe670c5c77
SHA512 ed3cc509e8935f5a0edcf613de31f6bfaea988368ff9634ca8e2e888937aa2f2c37d97ba33eaa3a61a25882c9ee30a52aff216cb642403eb685dce9bb82daf08
SSDEEP 48:Z4YnnBZJOnQFFfG9mEDe9DR9vAyB/CTE5AeApzVLVoBskL7/C023xPb:HJOnQ3ewEe39v9dyE5jSzZCBsk4
TLSH
T137919A6098E84A3651B381859DF55F8BFE928203C70BAA1036EC1BD35FF7C05CC9B129
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2968	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{D49D6152-EE38-4890-BFE2-B1FC0A0F6E51}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe
2244	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2272	2244	msedge.exe	86
PID 2244 wrote to memory of 4624	2244	msedge.exe	88
PID 2244 wrote to memory of 2968	2244	msedge.exe	87
PID 2244 wrote to memory of 4624	2244	msedge.exe	88
PID 2244 wrote to memory of 4624	2244	msedge.exe	88
PID 2244 wrote to memory of 684	2244	msedge.exe	89
PID 2244 wrote to memory of 684	2244	msedge.exe	89
PID 2244 wrote to memory of 4076	2244	msedge.exe	90
PID 2244 wrote to memory of 1420	2244	msedge.exe	91
PID 2244 wrote to memory of 4076	2244	msedge.exe	90
PID 2244 wrote to memory of 4076	2244	msedge.exe	90
PID 2244 wrote to memory of 1420	2244	msedge.exe	91
PID 2244 wrote to memory of 1420	2244	msedge.exe	91
PID 2244 wrote to memory of 208	2244	msedge.exe	93
PID 2244 wrote to memory of 116	2244	msedge.exe	94
PID 2244 wrote to memory of 208	2244	msedge.exe	93
PID 2244 wrote to memory of 208	2244	msedge.exe	93
PID 2244 wrote to memory of 116	2244	msedge.exe	94
PID 2244 wrote to memory of 116	2244	msedge.exe	94
PID 2244 wrote to memory of 2136	2244	msedge.exe	98
PID 2244 wrote to memory of 4044	2244	msedge.exe	99
PID 2244 wrote to memory of 2136	2244	msedge.exe	98
PID 2244 wrote to memory of 4044	2244	msedge.exe	99
PID 2244 wrote to memory of 1764	2244	msedge.exe	103
PID 2244 wrote to memory of 1112	2244	msedge.exe	111
PID 2244 wrote to memory of 3712	2244	msedge.exe	112
PID 2244 wrote to memory of 1232	2244	msedge.exe	113
PID 2244 wrote to memory of 2000	2244	msedge.exe	122
PID 2244 wrote to memory of 2000	2244	msedge.exe	122
PID 2244 wrote to memory of 4396	2244	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\IntegratedOffer-Pickle.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffeabdc188,0x7fffeabdc194,0x7fffeabdc1a0
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,4524943610411019302,6270720666286239458,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,7671702737400147640,17477903061408154318,262144 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,2859506490755639475,6837287711761041814,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,17831549365358692974,15605545537029857680,2097152 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,5568654211445485539,9003613064393024565,2097152 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,14798336543149077831,3221954067882996017,2097152 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,16286424280488746582,7657227281785415924,2097152 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7994311539153745680,13238011416089519095,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,14505621237633448815,6755896845885915952,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,5495183326118908652,8208173508172249725,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,5495183326118908652,8208173508172249725,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,2695467139095786779,16845523856534903974,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,7140171210975975758,4065746577754593585,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,14931049117677155794,11509506483296468447,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,18163461870625689297,1101806549630592895,524288 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=768,i,4084471031059174619,13063941443747755167,262144 --field-trial-handle=2352,i,14532981978335046001,12202265727677277914,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3232

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1feae493-d318-4d3d-91f0-7e6a250e956f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1feae493-d318-4d3d-91f0-7e6a250e956f.tmp
Size 21KB
SHA256 e633c617b88540fbe6ec967f8ded1f7c4b1186c2a69a5770d6c358c67387a07f
MD5 810ae0845604d370800ee1f9c2b50eba
SHA1 d95afb414d46c957b31499c375373f59835613fd
SHA512 183f0cd31674181b6bed2b371bd83b3bbc64f5305714cdcf005858ecaed4687a694581689328941e680a07cd25961d4a9fa72ad713f6fd0543666f59efe76350
SSDEEP 384:aiFiZcIbzsNB8TUNTUlIl30941LlvzIGmnZctQP3iLtgOIwZOyzLmo1:RFQPcwg/r7+Zu63iLXs46K
TLSH
T170A27D738CB8ECBBAEFB9945F58636139EB44167C6C4EB50E6DD9A0D009B19C030BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67517636-8408-4357-a7f6-81a84254b0c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\67517636-8408-4357-a7f6-81a84254b0c2.tmp
Size 8KB
SHA256 1b9bdcf9be707f4e754715de57272fc03606b5ce7433e415571b2501ec638765
MD5 b7baf37404ea734c50b1d1adeaf60a87
SHA1 caeaada49c4d97f581c5659c4a7cbfe7b7bc2fc5
SHA512 8a1521c6d1a67609eb8cec5425a01340a0c69750fd8e0074ad347c490e6ebe1bb5c90a669d7064193f285541b6bcc28f1b116d07f339bb099d4ef19e3c619617
SSDEEP 192:aONr6IE7QmiUyPwTPuIGmnZALSC7sn1U6:aONr6DtbPuIGmnZcXs1U6
TLSH
T11C02F975EC78BCB79FF3AD09F4873B236EA5112BA5942F84D9E81A1D00DB24C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fac7a31-e32e-430f-a5fb-326c183c3d18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9fac7a31-e32e-430f-a5fb-326c183c3d18.tmp
Size 18KB
SHA256 e2fa65d6d138c5ffe2decc699eef50ff3fbcdb466bc9c878b8ab8ce7572878bf
MD5 e295ca8f807aa6c85fc441bbb72707f4
SHA1 9babd51c0c829c77a26c2b58cb67354d919b3e62
SHA512 fcc5f353d538f18c46fe3b75c9825ac8495a30eda5b2858516a0412b84a2d501ef5702b2be9b0985557eeef4a88c4b5101ecaebf154bb4e33488b04da6b63deb
SSDEEP 384:qZcIhsNf60941LlvzIGmnZctQKiLtgOIwZOyzLmo1:IhTr7+Zu3iLXs46K
TLSH
T1F3828E729CB8ACB76EFBA445F5863A135EB4812792C86B44D5EE9B1D00DF258030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

0eb63b69-38d0-427f-8fd8-d3f1ef14ed56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0eb63b69-38d0-427f-8fd8-d3f1ef14ed56.tmp
Size 9KB
SHA256 3b356ad31cb1608e760360a1257f0783e004363294d84181c619201959d405cf
MD5 e319733d86ed4c7863091a9d12d10414
SHA1 0d5fb2b10ca789349de0c2939a6681fca5932e78
SHA512 72e037c6c8cf089c7230e3741a902d20d5c1c54e3fefeb35384691d19910b74f83558e06fbc3f203da7e030be5b8a5e4813bd69af50c80d2e9bb7154bb762924
SSDEEP 192:sxZwRNWw/fPsjCIIdpdGHW6+WNGYapYkIIgrJ:sxZwuw/fPsjogHbGQ9
TLSH
T19A22A8526E38B97B8CCBE21EBA55BF53E6F9503251901E48E6FCC51C08E66DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b7f3ec7-95e0-4889-9e42-f284ea6b2dfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b7f3ec7-95e0-4889-9e42-f284ea6b2dfe.tmp
Size 9KB
SHA256 024532ff04c7eef4d082dacfa1f3877beae29b227d0af23fc99536eed91a2e65
MD5 b4a445fcd743d88699c395d19249247b
SHA1 67af336143653aa79c6c0258513fa7090ab09be3
SHA512 543b2aacca2bc146be341ebc91c01150d1c1f878cf32bd96f27bb3e309e25b2b20f5a6db2472a346d34f312e5cce750f658942e75dea08e0adccaea59d9c1314
SSDEEP 192:sxZwRNWw/fPsjCIIdpdGHW6+WNGYapYkIIg5iJ:sxZwuw/fPsjogHbGQo
TLSH
T1E722B8526E78797B8CCBE20EBA55BF53E6F9503251901E48E6FCC51C08E66CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5352a518-c4e6-4785-832d-87489fc6927c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5352a518-c4e6-4785-832d-87489fc6927c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

602d7796-a742-4280-9dfa-1c9fe38605e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\602d7796-a742-4280-9dfa-1c9fe38605e6.tmp
Size 10KB
SHA256 d9fda2a457a8f6c0e1653be1ac5f27e5606b4bfd377d4de48cfc93eab763f463
MD5 22339104be2e5be78ab516bd5871d5f5
SHA1 8e1cf249e4914312147e3f55855bac598936d510
SHA512 c6249c06517e65d0ebfed7c31881155e435f4973d0b90a1583bcf6404fe6d8cd237322b478bcfd9c95e19bea16517c04b98ce73743e8e9542958f1725a63789a
SSDEEP 192:sxZwRNWw/fPsVCIIdpdGHW6+WNGYaplkIIg5IJ:sxZwuw/fPsVogHbGxS
TLSH
T18822B7526E78797B8CCBE20EBA55BF53E6F9503251901E48A6FCC61C05EA7CD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77f66429-d6de-4beb-81b2-d2708281b0b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77f66429-d6de-4beb-81b2-d2708281b0b0.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f8551f0b535601708bb6d8433765e8211f790b4b59823b11e2a9d6031f34ee93
MD5 b56efa2e4238bbae964c5179de2d3cce
SHA1 f3116c2271f912a5bd164948c031c285f50eb283
SHA512 78df5074b964b6582216186adbcc43a466efdf77f5bdcfeb4ad9aa4e46df76d60b68e2afd53381c924189b9c0fc2610ae5c7709715bff0a08dad6e3bc5b1b590
TLSH
T1025109904E6340CCFB9DE33482D0128F36309971AB830E2767B4DCBBD97639543DA040
MD5 SHA1 SHA512 TLSH

Submit Download

20e62e35-ea3b-4cfe-b494-ab4b7536bc73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\20e62e35-ea3b-4cfe-b494-ab4b7536bc73.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

66774deb-260c-4640-a14f-ced9c3823bcd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66774deb-260c-4640-a14f-ced9c3823bcd.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

87518ade-f876-482f-a9fd-eb61fc63fca5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\87518ade-f876-482f-a9fd-eb61fc63fca5.tmp
Size 949B
SHA256 c1255e6a33940e97174020aaec4d55ddd071acd1c1d31266943f6508d7c030c4
MD5 10d5ae32eb2a6088e45759d49a64f5e2
SHA1 ad8f26cf71a9cf23bab92a83727022d629b18d45
SHA512 61a54eab46218ecf162b4f301f0c438f4459898fd2b215c168d76f218c0679fcbf36d805787c366c5476a678aeb701319d346114aa5f08b8298f61d7a7c62d30
TLSH
T14111BAF3C3D585AE891516F05A24AE2BCE2D0616431C3C1989D4EF2BD3F3476E10299B
MD5 SHA1 SHA512 TLSH

Submit Download

9275eb26-f31f-47ed-89ea-72d8a4c3ffd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9275eb26-f31f-47ed-89ea-72d8a4c3ffd8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f113e9a8c72116ff49115a20ae64d82d32e1ba5de09de94e37a92c87311ff8cd
MD5 af77f29e1edb8677044bf9c81d08255a
SHA1 2d13a9ab390815e86ee7dafca5ce0363ab326a20
SHA512 ae80801914d7b574eabfa910acaf6d8ab49cd671f39eebb1c12637ffe075bfad595e279ed5502059886513578016a26e238f70e337e7cd166cfb8ac7006cffd0
SSDEEP 48:K0OpEIGM81bAHIISg1K9E1W1xulY/A8OyLjGnDtFVWbFIdISDWK9z1hWxrGYQx1E:KoF2Ku8aK8AKpKKJaKqcyN
TLSH
T1FD91305235BA421039BE3A5942A6D71A064531F33064EA2FBFAD44E64E6FF044DFECC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bea956a5-7a5b-4fcc-8716-83de599d1f59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bea956a5-7a5b-4fcc-8716-83de599d1f59.tmp
Size 10KB
SHA256 464721f17c34dab604c96bb7421b68fa0fd58a90c6c4bd34098de177ec071b76
MD5 e2c9b10e291fae3f41f5d00ef0c391a1
SHA1 011bb2ee6c0a6eeb39164cb1f5aab91ab7451f9f
SHA512 1c952ba76801dab28ca0413b57485617975f00e303fe5d0cfb197d63e10790d6dee59cb741250c7bbaaf55dbf065553fb5af40d3d6a0c9dff2280588651c3343
SSDEEP 192:sxZwRNWw/fPsVCIIdpHGHW6+WNGYapikIIg5IJ:sxZwuw/fPsVomHbGyS
TLSH
T1CB22C9526E78797B8CCBE20EBA55BF13E6F9503251901E48A6FDC61C05E77CD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd5f5c5d-f526-4655-8447-11bda11fe1dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd5f5c5d-f526-4655-8447-11bda11fe1dd.tmp
Size 27KB
SHA256 51830262b832b85f0dba5ea5547ed43ba32da9eb1e5b49b59dad3cfe65b9946d
MD5 bbedeeb2b0076b2387bf7e3a44cde3b7
SHA1 6ce02cf585c1134b8895d7e0a1a81a3da0540b9f
SHA512 f212806f0e465926dea172131245521930bb97143054320c642e61d3a786917e98afce111cbf6012a7bc6ccd47bed1a1fe6a239a3e4499b23fdcad5cc60e8a1b
SSDEEP 768:DxWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy70ro40feHmRyM:DxWPcLKWvKeEeu1jaClLiF7f40WHmRl
TLSH
T179C2FB3B644CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c00ac598-11a9-4469-9545-c451bc800a1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c00ac598-11a9-4469-9545-c451bc800a1e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a95b677f-8542-49fb-b6db-efb6145c5cd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a95b677f-8542-49fb-b6db-efb6145c5cd6.tmp
Size 18KB
SHA256 af22d0921d8f700de6df72482b7683952bd843dbd4d52fea39bc4411afd5652c
MD5 6a434be7b59ee06974dfc85931e61386
SHA1 5e07519d05d8476d055534e7abfc0cd64dd51797
SHA512 4ebff0321544e544e3377f0d6251d4bc8f59e37da21a52c043405443843758a96c7edf454f33434665222c0a6c4c6030392d8b763e10af23dec15fdab9ade2b0
SSDEEP 384:MZcIhsNf30941LlvzIGmnZctQKiLtgOIwZOyzLmo1:ahir7+Zu3iLXs46K
TLSH
T1FF828D729CB8ACB75EFBA445F5863A135EB4812792C86B40D5EE9B0D00DF658030B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3cceaf3-6f5a-4952-86ff-0c7c057b052d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e3cceaf3-6f5a-4952-86ff-0c7c057b052d.tmp
Size 8KB
SHA256 01d722faffa41251d240bd27bd379e2543f5771e2d74e144a762bb8096793bf4
MD5 04f53963798fe33fb6fee73e881bb36e
SHA1 d370daf0fada5da5c34462dfecf7a11864a56aba
SHA512 ad3214e9c35be9f99fd77175585d88b93d6dc5e56e4826f9907b8116756ff01b90beb5873b5eb9353a5979409576b62dbc85fddb097311d57b834e5afd1846bd
SSDEEP 192:aONS6IEpQmiUyMwTtuIGmnZALtQui27HwqNU6:aONS6DH6tuIGmnZctQ8HLU6
TLSH
T1FA121B76ACB8BC779EE3A845F48739235DA54227E7887F84D5EC1A1C01EF25C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba6d5e95-1f92-44ae-b6e9-b44f1894ecdf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ba6d5e95-1f92-44ae-b6e9-b44f1894ecdf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 21c12a1c986dd490063d6867c09b9e651f3818cafbbb4bda22e97df92083c4b0
MD5 2a509ff8e1a76fd0af765034797a79c5
SHA1 e3a2dcb31d4937b2205bf62cf6a4c1eb2a3a0b88
SHA512 e87406c1c3fc20cdefd5f28c654c5ebc9b3fbdc0f2b9c644a553f3f413a6dbe6718e47a77630ed9f82887fdb0d5d59c64dddb915b55f4eb1d5b21f577d21f78d
TLSH
T143411C5CA6FA1148B3B76E5AAFF7A86D447BBD372E06D49D10110E4E4A22B40CC72737
MD5 SHA1 SHA512 TLSH

Submit Download