5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 13:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-cd3i57.htm
Size 194B
Sample261002-p91zlstdjc
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{C51A7E9C-6CB1-4EF4-9A35-CDF04F78D670}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
960	msedge.exe
960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3144 wrote to memory of 4620	3144	msedge.exe	88
PID 3144 wrote to memory of 2116	3144	msedge.exe	90
PID 3144 wrote to memory of 4472	3144	msedge.exe	91
PID 3144 wrote to memory of 4472	3144	msedge.exe	91
PID 3144 wrote to memory of 4472	3144	msedge.exe	91
PID 3144 wrote to memory of 3580	3144	msedge.exe	92
PID 3144 wrote to memory of 3580	3144	msedge.exe	92
PID 3144 wrote to memory of 2716	3144	msedge.exe	94
PID 3144 wrote to memory of 784	3144	msedge.exe	93
PID 3144 wrote to memory of 2716	3144	msedge.exe	94
PID 3144 wrote to memory of 2716	3144	msedge.exe	94
PID 3144 wrote to memory of 784	3144	msedge.exe	93
PID 3144 wrote to memory of 784	3144	msedge.exe	93
PID 3144 wrote to memory of 3176	3144	msedge.exe	95
PID 3144 wrote to memory of 3176	3144	msedge.exe	95
PID 3144 wrote to memory of 1636	3144	msedge.exe	96
PID 3144 wrote to memory of 3176	3144	msedge.exe	95
PID 3144 wrote to memory of 1636	3144	msedge.exe	96
PID 3144 wrote to memory of 1636	3144	msedge.exe	96
PID 3144 wrote to memory of 3964	3144	msedge.exe	102
PID 3144 wrote to memory of 4820	3144	msedge.exe	103
PID 3144 wrote to memory of 3964	3144	msedge.exe	102
PID 3144 wrote to memory of 4820	3144	msedge.exe	103
PID 3144 wrote to memory of 4212	3144	msedge.exe	105
PID 3144 wrote to memory of 4328	3144	msedge.exe	114
PID 3144 wrote to memory of 2584	3144	msedge.exe	115
PID 3144 wrote to memory of 3296	3144	msedge.exe	116
PID 3144 wrote to memory of 4896	3144	msedge.exe	124
PID 3144 wrote to memory of 4896	3144	msedge.exe	124
PID 3144 wrote to memory of 960	3144	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-cd3i57.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffff711c188,0x7ffff711c194,0x7ffff711c1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,17463119269695569503,2904448612662420338,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,9866146102186410170,2100005648350113536,262144 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,16783347600644287608,147771623068334435,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,2160234483375036394,10331243307729932252,2097152 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,6662300961715202780,17793521864810955504,2097152 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,7458373701846422113,6853876912827292,2097152 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,17425008661438978172,491601595244841929,2097152 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,3748130191738281503,12875769572699289981,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16004919635914637962,7060793978810995390,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2505110279004967051,9206176531222926901,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,2505110279004967051,9206176531222926901,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,8836800028738179134,862717152209648066,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,18109055274794503083,12401163504132292557,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,9550466731276116640,2409741979202323831,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,15588740102214654057,8261300069680928898,524288 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,1135147795474050132,10852752416677485097,262144 --field-trial-handle=2344,i,15337655544400333127,4942148710481447922,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:960

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

51078eeb-77f0-404e-8dae-56717f2423c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51078eeb-77f0-404e-8dae-56717f2423c3.tmp
Size 21KB
SHA256 5d57310222bdf591061f4246afe056a2ac3b56d21627943a577d25f2a7bb0b3a
MD5 b393c3875a70973437365f8ccde05e5f
SHA1 f56b4ecb9699302ba9190a5f9fb79a0d35f470c6
SHA512 d7da79ed0a2422265435834adcd012b7633d6bd615a66364bce9a8359d1887117b5f60f0394fa88f65555c0565e47c0f0779bb98a3cc0d1295dac739d5690551
SSDEEP 384:OiFiZcISzsNX8TUNTUlIlxXsU5wq2b+v3uh//ySbbtgOIwZOyZo9oZ:lFQ66wg35wee/nbXsf9m
TLSH
T1E0A27C735CA8DCBFADFB9A84F14636038FB440B7D695DA90D6DEAA1C01DA09C1307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7567b2a1-09a1-4c05-9795-9a88407b25cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7567b2a1-09a1-4c05-9795-9a88407b25cb.tmp
Size 18KB
SHA256 0d74cabc231982d990ea1f7f6251ca78aa5d37ed21a671188d64fc4d6fca8efb
MD5 fe52e37a67cd9c52584ee8b4221b80e7
SHA1 6fb5bfad53dcb965efd2cb7f3620cd2499b8a317
SHA512 5bbdb7d337fee62021ef0bc6d108d29a5f9e84e70e4318e580a35004e6efb8ab377c6f044b2c75971e429a9e1f19a5b8c9357e0c5f7db7a289dd633607f1a413
SSDEEP 384:zZcIhsNNYXsU5wq2b+v3uh//ySTbtgOIwZOyZo9oZ:rhB5wee/fbXsf9m
TLSH
T1B5828E716C78ACBB6DE7A184F14736038FB484B7A7D49F90D5EEAB1D01DA1A81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

0dbbfa0c-7744-4fad-97e8-9386a801eb0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dbbfa0c-7744-4fad-97e8-9386a801eb0b.tmp
Size 10KB
SHA256 edbe98990c27f712d78a598402ad3bf3a03a6269011eb7519977bf53604c8c9d
MD5 4ebe679eab7b0dd1d0cb903bb40d61ae
SHA1 4af62608a882e6900b28c3c0fa8d2d83e84c2478
SHA512 c49c8d3abcfa8bfcac676e83d776b9e348afb06bbf1882ae6fdba8215743a30dfe8f57a6f46f3425b77109e5c9bb14e64e93503739a4106ab7961efe8e0b09ab
SSDEEP 192:sxZ2R8WU/fCsbCIdpdOHW6+WNGY36zhLqIg5NJ:sxZ2NU/fCsbr8HbGXzEB
TLSH
T1D622C8116E28B9BB8CCBE20DBA157F53E6FA503251D41E58AAFDD61C05E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

245ba78e-73a8-456f-8497-27a438fb9a4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\245ba78e-73a8-456f-8497-27a438fb9a4a.tmp
Size 10KB
SHA256 da1f54e1f52d2563e75e08ccbb1a82a97697c9969541d39a63498da050236048
MD5 592d997985e85f1c80dc9d6ac859c34a
SHA1 931c6c18217076362658fb79b73723403e4c16ec
SHA512 5abc8ce529cdd138aaf09578b37b92df30ffac1822fbf08a721b144c8623b7e9dc20a15c53265c75eb52d095c0a1c4362d7c88ccc4c0a68756255331888e1f38
SSDEEP 192:sxZ2R8WU/fCsbCIdpHOHW6+WNGY36IyLqIg5NJ:sxZ2NU/fCsbruHbGXIzB
TLSH
T1A222C8526E3879BB8CCBE20DBA15BF53D6F9503251D01E58AAFDD61C05E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

343e66c1-a273-464b-91c3-3e50a7d42aa6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\343e66c1-a273-464b-91c3-3e50a7d42aa6.tmp
Size 9KB
SHA256 c5f411a4a8746b4c7c0d80f5a5905fb9af771306d10b78293ce7111f059c0563
MD5 198d4c60047afcfc9527a41086c3aac0
SHA1 3a1e79e7d60e846ef593e3123ce487118bb9c030
SHA512 f849dc5b5ba45de89981482b091be22231861eb232cdd19ee574e265f1a1c15c2f224c89444ee6050c84751642e0634fbb2e6cb7cfaeb58fdd25079bc9bfdebc
SSDEEP 192:sxZ2R8WU/fCsqCIdpdOHW6+WNGY36aLqIg5vJ:sxZ2NU/fCsqr8HbGXr/
TLSH
T1E322C8116E38B9BB8CCBE20DBA15BF53D6FA503251D41E58AAFD961C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

445835b4-ab15-47b6-a3ab-a54db78f6cb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\445835b4-ab15-47b6-a3ab-a54db78f6cb2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d2322b4-e712-4f32-8086-0f07510cb8ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4d2322b4-e712-4f32-8086-0f07510cb8ad.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7ca2f51f-1e6e-4551-ac5f-a109e988b251.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ca2f51f-1e6e-4551-ac5f-a109e988b251.tmp
Size 9KB
SHA256 5e72c4a5873e7a9412619a102680c42f08708ac04e7a4223971bbe7a59cc2492
MD5 d7a0d656e8e78e08e3f1dd36617dfaf4
SHA1 3533852a382a7bd0a59d2e07e53181b5da6aff28
SHA512 b56decab1b7cec8025d97119348694ac3a8ec213d670f98003e948a1f7c02916ddf6132d3f263f32d79b3a6c182745984ee342c0e10248e2ed0efa2e31551d42
SSDEEP 192:sxZ2R8WU/fCsDCIdpdOHW6+WNGY36aLqIgrJ:sxZ2NU/fCsDr8HbGXr9
TLSH
T17A22B8116E28B97B4CCBE20DBA25BF53D6FA503261D41E58AAFD961C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92cb1ec9-11f9-4dc9-9ba4-7183fcaf52e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92cb1ec9-11f9-4dc9-9ba4-7183fcaf52e0.tmp
Size 27KB
SHA256 24b3e0f72f097830ee049bb88601a6cf6289cc10cbec9253b8bf083df17b4d93
MD5 e722c442ea6bac88d207fa2dc951f0c4
SHA1 e42c8fd8fe58213353954c1ee18c5db64eba17a3
SHA512 7ced290c44a11fd2ae9462bcb0cbfd79db0989696d646cec109ca28a2680d3daefd0eb79dfec84bb844e1effb681d8f4af64c0b2648d7e44d78775ce91a0373d
SSDEEP 768:nnKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/2roDm:nnKlm7QWvUYe0u1ja8/L/E/NDm
TLSH
T105C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 eead8f14ee572ce57ceae1d478398896e1d6de3a89ff89f376f592d6e7acc57e
MD5 d6cbf9fd426543cdebd3d6d8937251c3
SHA1 42acb4ea2cb0b19fc19db6c0f0faa34076193b4b
SHA512 bc9435916392086501d4c55bd5cd584a259a0512ed871d893f5303affc539c13c327ecc1399e239219f70e84703e29dbfe11240f037f133f61b3648f95c01916
TLSH
T1D4517E9C17E066E1F7A9CF34A6F3118FB8F0C0C1518B1EDE50E8DA7AA866F025074C18
MD5 SHA1 SHA512 TLSH

Submit Download

5f9e8ecd-a115-4024-9033-b16a32549e13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5f9e8ecd-a115-4024-9033-b16a32549e13.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

59b11bda-1406-44b8-9143-6d9130f25fbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\59b11bda-1406-44b8-9143-6d9130f25fbb.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

6fc3dc2a-41b7-4714-95f7-07811857390b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6fc3dc2a-41b7-4714-95f7-07811857390b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

97a8990a-4d9b-4f1c-bac2-f2ad567b4bf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\97a8990a-4d9b-4f1c-bac2-f2ad567b4bf1.tmp
Size 949B
SHA256 634f9e94dd2b795a23b7b4c35c64ab752bba4c77d95ea7091d2b783dd4105a3b
MD5 854954e86774145dacf9da49dd0a65f5
SHA1 65d6c9da0cb90ed924a14f72a815473962067247
SHA512 f70abf99864953db2cc2654f67f704b1f8764b5d0370f188d2b564436f357c87b78d8f0fe337c30716c9b164e58538514fb83ede9ac9879b297025ca800393e0
TLSH
T1CE115BB3C3E585AE891116F05A24AE1BDE1D060642187C1A89D4EF27D7F3076E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4cd8ea3447d68e62adb499d48cdfc4bbfd77951ae91f5de58a4d3b61ba6c463b
MD5 d1159a824d143cd3b679b3abe1ef9a82
SHA1 8c84f1c2cf032a41f51be9c73de7abd31f483c62
SHA512 765c0f36d096bbc03a30ae5cfcfcd77571965579f102521a27e722f8f9d8a3f74e3bcc0fadd513f5e8015f42b184fb7056352ee9f0b3d8e645b5c1d6ca56025a
SSDEEP 96:Kg1eKeAiOD+KsAyq/G6ko0gIwRziigK61icg2yiB8KtB:s5lBq/G6ko0twRGiO1iclyiB8KtB
TLSH
T17191400535BB125438BE69AC4065871A4A5235B33418E52FBBED80A14EBFF148DFF8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e69fff4f-2e7b-4e28-84fe-82f1edb1a9ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e69fff4f-2e7b-4e28-84fe-82f1edb1a9ee.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0bcd65f-f1c8-45bd-9498-6a87022de637.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0bcd65f-f1c8-45bd-9498-6a87022de637.tmp
Size 8KB
SHA256 cf0615ee3e69261a2be50d03923cf2986a7643b8c3b1ff864c7001e6e07a0cd9
MD5 44836697be98f55fabb8b1f829d64949
SHA1 22e144321199a981dcaf7d36b83756e1465fb25b
SHA512 7ad8ada0be2c7ac2086d2956536d0a8aefad298272f04e05d9462f632ed0152fbc8a425ec2137067757ed2cac649437a88883a72c8ab7d90a51f223d2ef3f625
SSDEEP 96:KqONkYQsjpfbUmjH5ih/cIPURHl8h4otop5aaDGBKP4v+Y1xf//ojdixSYiywg53:BONs6JUm0QmiUyHWso//WywABCfeU6
TLSH
T14202C739BC28BCBB8EF3AD45F4877B239FA4106BA6951F84DAD91E1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c264cef3-43ed-4ff6-b502-c8691290392d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c264cef3-43ed-4ff6-b502-c8691290392d.tmp
Size 18KB
SHA256 c50b23a2d95a7d11ef5dbf050fd5307f2711398f8d4107e5da0c43972acb244c
MD5 14d70699f8c339d00088e9a9441230f1
SHA1 3ad3d4277955f05eac38d373a6f8959f71cec614
SHA512 87028fdc304fd6ec0f541aeb8cb894d5744da802d3db38d102ea0b8df2539bf35f049266d3c23ea92e56a3eff15eb84b1df864456daae68e543876496a4d962c
SSDEEP 384:4ZcIhsNNxXsU5wq2b+v3uh//ySTbtgOIwZOyZo9oZ:GhU5wee/fbXsf9m
TLSH
T12E827E716C78ACBB6DEBA184F14736038FB48477A7D89F90D5EEAB1D01DA1A81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af452fb5-b59b-43c8-83d8-74723b6cd47d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\af452fb5-b59b-43c8-83d8-74723b6cd47d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7db905e-79b1-4e8b-8475-27d57702e35b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7db905e-79b1-4e8b-8475-27d57702e35b.tmp
Size 8KB
SHA256 1c4be074c72f47fd67f583cdaf58160b841070459ddb34aaa078004e43d9fc0e
MD5 af5b0c09d2cd2f854ed14ce372cbf7e0
SHA1 ed23ee20ff2538fc8082bf97287136766f81a887
SHA512 ed9d2903f1bc29ef236fcd4e295b8a5b48ac9a06a3e4d0cfdef6004c45f51abdc70ad24fc0be249fcb513a5c0d7038d588f66f3684fc706b200b003e81ef759e
SSDEEP 96:KqONkAQsjpfbUzH5ih/cIPURHl8h4otop5aTDGBIP4v+Y1xf//ojdixSYiywMxty:BONI6JUkQmiUyUW6o//WywS+NxrqAU6
TLSH
T1A4121935B868FC7B5DE2A591F08336239E648067EB856F94D6DD2F1C02DB16C6307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 73b102a0d71d91afa63988a27fb69da184206c1d87f2a6857261aad7f3ddddd0
MD5 b7d880ee6229ee7f3cf4aeac1da5bf3c
SHA1 1a0f6d1e4d4383287c82c4b48ea2f74ee3c2c9db
SHA512 2e20f8964ff5af42e9d4cf8c6b812b7f7d94ec37947cfee6f3ada862c5a6ed3d18e102b4d16e39cb921e175c30e50c2c5818861a09d80b8fdbccd7c033f98ed7
TLSH
T13141265CA2E9114CB3B7BE1A9BF6686E48BBB8732F06D45D10110E4E4662B40CDA1737
MD5 SHA1 SHA512 TLSH

Submit Download