3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 10:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-gyrtjw.html
Size 171B
Sample261002-mx69ragg72
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3964	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{708B7B76-66D0-461C-A09B-B7D32A9B3250}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4328	msedge.exe
4328	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe
4132	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4132 wrote to memory of 2016	4132	msedge.exe	86
PID 4132 wrote to memory of 3964	4132	msedge.exe	87
PID 4132 wrote to memory of 3280	4132	msedge.exe	88
PID 4132 wrote to memory of 3280	4132	msedge.exe	88
PID 4132 wrote to memory of 3280	4132	msedge.exe	88
PID 4132 wrote to memory of 4380	4132	msedge.exe	89
PID 4132 wrote to memory of 4380	4132	msedge.exe	89
PID 4132 wrote to memory of 5008	4132	msedge.exe	91
PID 4132 wrote to memory of 4152	4132	msedge.exe	90
PID 4132 wrote to memory of 5008	4132	msedge.exe	91
PID 4132 wrote to memory of 5008	4132	msedge.exe	91
PID 4132 wrote to memory of 4152	4132	msedge.exe	90
PID 4132 wrote to memory of 4152	4132	msedge.exe	90
PID 4132 wrote to memory of 3044	4132	msedge.exe	93
PID 4132 wrote to memory of 3044	4132	msedge.exe	93
PID 4132 wrote to memory of 3044	4132	msedge.exe	93
PID 4132 wrote to memory of 2132	4132	msedge.exe	94
PID 4132 wrote to memory of 2132	4132	msedge.exe	94
PID 4132 wrote to memory of 2132	4132	msedge.exe	94
PID 4132 wrote to memory of 4252	4132	msedge.exe	99
PID 4132 wrote to memory of 1236	4132	msedge.exe	100
PID 4132 wrote to memory of 4252	4132	msedge.exe	99
PID 4132 wrote to memory of 1236	4132	msedge.exe	100
PID 4132 wrote to memory of 2232	4132	msedge.exe	104
PID 4132 wrote to memory of 4872	4132	msedge.exe	116
PID 4132 wrote to memory of 3732	4132	msedge.exe	117
PID 4132 wrote to memory of 4600	4132	msedge.exe	118
PID 4132 wrote to memory of 4416	4132	msedge.exe	119
PID 4132 wrote to memory of 4416	4132	msedge.exe	119
PID 4132 wrote to memory of 2132	4132	msedge.exe	122
PID 4132 wrote to memory of 2132	4132	msedge.exe	122
PID 4132 wrote to memory of 4328	4132	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-gyrtjw.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffc878fc188,0x7ffc878fc194,0x7ffc878fc1a0
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,7304305635044979560,3077187467645122653,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,15001472657222773982,17389908954212450382,262144 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,13356736056038084785,8466070060095209418,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,17151814485792472918,6579435401173288843,2097152 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,8694417589486045448,12654015827491353056,2097152 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,8328954366106827947,3190283802439901177,2097152 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,5432263956359244547,11304908821940463622,2097152 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,18295188509428102600,14093546498559188297,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10519505358945208206,1769872182233133644,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,16436422358192150857,4317558938024052004,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,16436422358192150857,4317558938024052004,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,2024091065467805211,2595214014334665896,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,13957399038209917150,16868296412573849174,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,11996384348100600825,15037762878469868059,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,4483374205219312099,13691812104130172135,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,1243444215361842197,7273734797735514673,524288 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,4423147665045721799,4346905332319019852,262144 --field-trial-handle=2288,i,11645793929582159340,2068640007615454743,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

26e4dfef-54e9-480c-98bc-fb1dc9c0f48f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26e4dfef-54e9-480c-98bc-fb1dc9c0f48f.tmp
Size 14KB
SHA256 e34b728ee714832dfca94dca08646a2a394530b2d6dbfec48161c4cc6665d067
MD5 237326db033e57285c7e1807e0d481be
SHA1 abbbb5e6b64d0c79666f59fd43e065999560f47b
SHA512 bd4e93e8770199e6dd306ff10f05f9342e932e525dce0f5a6c0d63542f456a97b101420867d2eeb883e1cac0fcc3b9392c16ccf2c1040c9cfbc6a07327272c75
SSDEEP 384:NiFmzsNX8TUNTUlIlrol3Z6nIQHX58E9O/JramIcUI:EFWawgSZCIua6O/JrVVUI
TLSH
T1AF6219339998ED7B9EEA9A45F54632039FB501A7CA85AFD4E3CD9D1C009B19C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2eda4f64-12ed-4f16-b9d4-ad12152c86f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2eda4f64-12ed-4f16-b9d4-ad12152c86f4.tmp
Size 8KB
SHA256 0d65538c72e8eede381eac9941ec7a7165bfaaabe4f29881efb8b08220f0a6d9
MD5 16947d0c87b5a31aee001866fcd0e86e
SHA1 e1a370379994d87c29ff9a1dfb70aa12e37e72f4
SHA512 06918e309ca8a6b2408c545b42e45613a69fe6e7022f63c8318390020732566750856509786c62fef58489a4850b28ca3e97da14cf4e5d3f4b7b69c918152cd9
SSDEEP 192:1ONw6wlDBQmiUyPCGQ4X58gZ9OK8JrAve6qAcU6:1ONw6kfIfQ4X58E9O/JrbIcU6
TLSH
T18912F831A9A8FC6B5EE2A545F48731039FA55267EB896FD0C2DC2E2C01DF66C130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

750a037d-c4d4-4389-910d-d33f16b40917.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\750a037d-c4d4-4389-910d-d33f16b40917.tmp
Size 11KB
SHA256 4c3815af927c18be6eb0b56180a31d3e621dacb3d0df6dba36c38d4e17d106b4
MD5 f51dca0dfae966ef03502b59ee63dac1
SHA1 a29fd74cbcb0818ccdc78403813d0a823cbb04af
SHA512 dc012dcdd14ff15fe9c812e0cd0e730e1952a9bd28fc87ba7d22660da1a996586df6a260c9451ddbbb5af0eba40903c087b81a01dcbcbde17177a26636c5f94e
SSDEEP 192:uELsNNrQll5jp3xlDZ2bQmiU1lj8f4HX58gZ9OK8JrcUP6qAcUA9:tsNNrol3Z6nIQHX58E9O/Jr3IcUA9
TLSH
T126421931A9A8FC7A4EE6A545F54732039FB4516BDB886FD4C2DDAA2C01DF26C130B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f67d335-2082-4eb1-b0d5-96dc0ca7bf6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9f67d335-2082-4eb1-b0d5-96dc0ca7bf6d.tmp
Size 11KB
SHA256 4b7681d3ccec6b1e4a22faab91db3d06a415a91cd3dae0360e827cd8eb1375c9
MD5 7696cae784a6f6fbd91dfcec9cde7b0c
SHA1 240a8e2fccd21df56276414d3fa566519883c86f
SHA512 76c128237bc16639fa2e5ca99f72a775f793087a77c792d2c404696c9f6a2246910476e197e93555c90bc18f70cc5290b5baa25c47454c25526d7284ccc82baf
SSDEEP 192:ujLsNN+Qll5jp3xlDZ2bQmiU1lj8f4HX58gZ9OK8JrcUP6qAcU8:8sNN+ol3Z6nIQHX58E9O/Jr3IcU8
TLSH
T10B322932A9B8FC7A4EE69544F54732039FB4516BDB886FD4C2DD6A2C01DF2AC130B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

14d4e63e-ab0f-4dd3-8d60-552e50ff2cc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14d4e63e-ab0f-4dd3-8d60-552e50ff2cc9.tmp
Size 10KB
SHA256 b3a435857498d7f96b7608b9889c9618a4128528419dc71829340f7ae5a9ff98
MD5 3dfc1db8615ca23304c5ae7ad2539e5e
SHA1 21ef760093883418043ad574cf79fd2b46c26a4a
SHA512 6d46e3e8dae801e12beda5173d4aa10a6081c1aa467ea708405f1e031ab38b77b1ef2b4ad420094897d808ce44de7eca58400e68d3a4eb4eeb10652774ad816a
SSDEEP 192:sxZFRNW55/fqsHBd19KIdpdwHW6+WNGYrtwYIg59J:sxZFq55/fqshd19DyHbGep
TLSH
T1F722A8526E28B97B8CCBE20EBB157F53E6F9503251951E58A6FCC61C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16122668-3381-4ec0-b7e8-7958cba9c36d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16122668-3381-4ec0-b7e8-7958cba9c36d.tmp
Size 27KB
SHA256 9e0bd2d8fcd7364824bbc770d74edd44cfc7cf8154c3ebc2ede70fe0777ec423
MD5 2de9707551bf00e19111e01c5c97f7fb
SHA1 8bc054243cd5b0f276c55600ae11ba29cdc41a78
SHA512 cda4a6e021e886e8f283486a2d49c7452a373a0e8283943bae5e9fcda478a40b98be7b6a9a24288d68cc8045b87dd66938fccac300ee6ebc07eba0f0544227d1
SSDEEP 768:yry4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbRroRgG:yry4J/DWvbtBhu1jajiLm0bqiG
TLSH
T1C0C2FA3B644CCB7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

251b134e-f1d9-4e83-9467-98b1e65955a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\251b134e-f1d9-4e83-9467-98b1e65955a3.tmp
Size 10KB
SHA256 2b7847b82216d1bded581bdf94505fb7836bd47b0ab885179a61407af9de3bf4
MD5 2939acb43e73a82e3fc8ca8563084771
SHA1 bdad105f8c71d85089ee627c62564ddb493b7074
SHA512 2b1567d3b3e070d5153197ecafc459358b113c45c37662d9ca12559e1d4416409e42405afbb485cbca108b8d1123f234a54bd460914a1c65d4518fca4f2ff000
SSDEEP 192:sxZFRNW55/fqsHBd19KIdpHwHW6+WNGYrJwYIg59J:sxZFq55/fqshd19DQHbGCp
TLSH
T13F22B8526E28B97B8CCBE20DFB15BF53D6F9503251941E48A6FCC61C05E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36779bbb-1568-432c-b6a8-8d5d864540ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36779bbb-1568-432c-b6a8-8d5d864540ec.tmp
Size 9KB
SHA256 c731967f192ec7ea643c3512a041bb7917a464f793b96c14ae9be11394c320f6
MD5 b14b0b58d25081599f8571142c66271c
SHA1 3e8ae9925d95a3dcb008def2cde7e4c323d94c09
SHA512 961ec0bb09f9f5d05050e3e92a37bf2998987ecbc3c58554a9de8539c9388a4d0357eb19af9371e3e90134f4674df20cae9cdbaf2a7e2e8fef20eba6168d87eb
SSDEEP 192:sxZFRNW55/fqsUBZ19KIdpdwHW6+WNGYrbwYIgrJ:sxZFq55/fqsYZ19DyHbG29
TLSH
T19712A8516E28B57B8CCBE20DFB15BF53D6F9503251951E58AAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

381a8bd8-b61c-47e9-b2ed-8435095672d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\381a8bd8-b61c-47e9-b2ed-8435095672d1.tmp
Size 9KB
SHA256 183f9104b5099fee2bbff816a95b27c099e26eda4501876deb542f92c5a5d98f
MD5 13f64def56975b5e671709def5d07a4a
SHA1 4af409dd2666bc9eeb99cd02abe1d7c15c0ee260
SHA512 6b8501d3428a98d843e750cc9b12b401ad519457c3b9aff8118f4f38de0b76e5c757b85293395aa020130e70fb5a13c98eacc36960a577decdf1c4f98c184b7d
SSDEEP 192:sxZFRNW55/fqsHBZ19KIdpdwHW6+WNGYrbwYIg5fJ:sxZFq55/fqshZ19DyHbG23
TLSH
T17D22A7526E28B57B8CCBE20EFB55BF53D6F9503251941E58AAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57c157b5-5ec7-47ad-94b8-6f09cb212e13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57c157b5-5ec7-47ad-94b8-6f09cb212e13.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b802847939b805b408ee3a4aaf809c37ce9e6640a525b2bd07c7d8a3d7108a5d
MD5 3d4a9bf5cdcae3ec6ca8890e450d596b
SHA1 b14af32f8414f9336c3bfa7f02b8f29bfead0cb9
SHA512 9a9b502189176f33d0dc30d72b2a54ac19fec9301acf372aa5a161eeb98a2f951b6738961dc1ce56a04157b80b22de25c9f62109255b5196d6ce18f1d20dcd2b
TLSH
T169E026E504EACE6EA348F4C70278934CC380B61BE2C0695E6B20C9C57449048E7866B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 228fa37b2af9f7be3a156a8719ffbff0925ed1eef10050ac47dcfd10b18445c4
MD5 c05047e169a5f0dabf546a74a61dc952
SHA1 def7f871af65ff22fdd5da13d0d2c1edbf912783
SHA512 32754e52bf68f4bbe88b44be785f34b01b07531a5bf8a88f70aec73870555218ecce59db5a8b4f7fb4b7f3451e64ed33ee437ff120d4dfcc391cc7800d59d8e6
TLSH
T16061D68A89933CE9FB6411747BE109CB377619BC56B35F4A2BE8DD38B85EF188500C54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 97fa5e7cb12753f5e04180846c8b151fa9c84c0550bf897f73bbef8440d31a38
MD5 3a49e2ea048a1f97d238fd1951a43204
SHA1 7bf4e2633b348388ef2a1c26d64802cad02e81bb
SHA512 c20698d11f4fb68e95b56512473d16b6aaa81e70661d034a5a17e6d0786d5a086dceeb7101a025ebf747792129a6eb664918d3a6d04d983b7745cf92e41689ef
TLSH
T1C161E68A89833CE9F7A011747BE109CB377A18BC56B35F4A2BE8CD38B84EB484500C14
MD5 SHA1 SHA512 TLSH

Submit Download

e5fb11e3-41d4-487c-941d-943b64c92f85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e5fb11e3-41d4-487c-941d-943b64c92f85.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0f1efd0c-6c88-441d-aa12-5c7e9d4b5bff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0f1efd0c-6c88-441d-aa12-5c7e9d4b5bff.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e13a8e87-37b5-431c-a191-0ace0d6d646c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e13a8e87-37b5-431c-a191-0ace0d6d646c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fcb46a6f-e739-4d33-b68c-09833fe43cc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fcb46a6f-e739-4d33-b68c-09833fe43cc4.tmp
Size 949B
SHA256 d91700eb4be0d750c14940bd45de725b66a2b7e5d6a5d067ccee51e824315645
MD5 d93bbe5615757f6ab848c97d67f3b81b
SHA1 12cde02724ed642c7cdbdd905e83ed5ee3be584b
SHA512 11057e436efc58a88b7209e748ecc759e165c556dd12513e75d3402784c007f5032cb06275f2198ce53cb3cf4aa287e8b93d90d2c679e77433c23a0895ef2450
TLSH
T1FA117DF3C3D585AE890516F05A24EE2BCE1D0606821C7C1989D4EF2B93E3475E00299B
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4b869be27089c04aa756320cad9c0798c475bf9abcca5bd917f4ff29f35720c9
MD5 c0159537c5d78e674218a69ca0d6d324
SHA1 341140e736d7ae011be9e71a4f237abc9bdac893
SHA512 174d5214731d2f6f425f50f6db5b0222bd81f257f67fae4094e5118ed376e5d9d8185bf0996f00c9ab51b2a0277e79fb9eae4d65032be54a67a66269c1c6cdb3
SSDEEP 96:KIDCKs0+dXm7HN5FkV50Pb/kKDBblkvnHUNn5CWQK7Ka:E5dXm7HN5FI50D/jBblYnHUNn5n1
TLSH
T11491B341346B169138BD3A5C40B4952B475231B37129E9AF3FFE85A25E2BE044FFD8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfe27915-6e59-4135-904b-be4f54c61bd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cfe27915-6e59-4135-904b-be4f54c61bd5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a779add8-63de-4307-b8ae-f1acd0a84d35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a779add8-63de-4307-b8ae-f1acd0a84d35.tmp
Size 14KB
SHA256 44f46a4a94577d0a92f0145753c2ae470d4de947d5996e4902bccb62bf622844
MD5 48b464322b5c75c87663ad2d45f5fe14
SHA1 c0f6e7bdd042e2cbd7639f1e36dec9d71f10ad61
SHA512 b4083cd195d7fba726ab41efeca44ee22c9939be5f0c177d52ef8e4c5e3b776871fa9b72a2fae17de9e33eb56846f30e3ea19a1c0c6178b17ce838804eb618de
SSDEEP 384:NiFmzsNw8TUNTUlIlrol3Z6nIQHX58E9O/JrhIcUI:EFW/wgSZCIua6O/JrhVUI
TLSH
T14E62193399A8EC7B9EEA9A45F5463203DFB50167CA85AFE4E3CD5D1C009B19C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf152f14-bc2f-49cb-87e3-b13a52e4b921.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf152f14-bc2f-49cb-87e3-b13a52e4b921.tmp
Size 8KB
SHA256 7af70d88b65efc081771a7bdebc291c4f6a6c8790153e50ccc94dc788da93e43
MD5 d1e54a2d4a6f773a275af9d378dae935
SHA1 8e80bc9fc2613c7f241103737d4c1fdb42550475
SHA512 ad301c8575c3d20a8775213b1bb8dd5a9a1b3ff366c7c15fe25b8da073b102fd2da8ce41eb5aa77880014cd217d766f0f1e50d30430d7d4ec4c7601868e7b525
SSDEEP 192:1ONr6wlDgQmiUysGW4X58gZ9OK8tDlGXhU6:1ONr6kgyW4X58E9O/jKU6
TLSH
T18502E934E9B8BC7B9EF6AE09F58737139FA4216BE6952F80C6D81A1C01D765C1307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a602ae3-13a1-4281-b847-9230dd2d1601.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4a602ae3-13a1-4281-b847-9230dd2d1601.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8371195d8fe9a56b5c2b3784896a7784f951ccd1e8d71bc051b38a30db08cfb0
MD5 55699cee53bacb917105666f63a90336
SHA1 6f0db8e6a59409fde5ed813dcf6cfef269a46f46
SHA512 1a7d0e38cfde02cfb1cd522d31c68d9030f2f3f05c4eb56ed4f865590d8d43b1a548c745b94d0095632d6c8e991acc3eb640b708106dcfbd351da47d8145c748
TLSH
T15D41F458A6EE1148B3B76F1A6BF3A86D487BBD372E46D55D00110D4E0A62A00CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download