e6316cf7a2adaee722250ac201eeb143422e10c009134331ec47c161c610f71f

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ca/banklain/otplain.html
Size 13KB
Sample261002-pmlleaaa49
SHA256 e6316cf7a2adaee722250ac201eeb143422e10c009134331ec47c161c610f71f
MD5 769663e70e200cd46dd99ab271311f33
SHA1 5196d986a1ac0fc50587fba33ae7fe024c895f6b
SHA512 46a98353207cda1b812211b9e453cfb8b512fcd7e011df4facbd614062b124708ead39ce4566a3d274201d591e60fed9a5c3ab897908854f03923dea37a13d82
SSDEEP 384:RrE/TWzbGIDX5/qQgL+dd0lZitiPz09z8:QyzbGIDpeL+3sgcPzAz8
TLSH
T16652F7E36AA311762967E5551BE66B0A3139D003E20BD9583FDCA29CCFC27C5D8B234C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4444	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{8AE28BF9-DFAC-437F-BEA3-7407EF6DB81B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4128	msedge.exe
4128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe
2776	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2776 wrote to memory of 4020	2776	msedge.exe	84
PID 2776 wrote to memory of 4444	2776	msedge.exe	86
PID 2776 wrote to memory of 2220	2776	msedge.exe	87
PID 2776 wrote to memory of 2220	2776	msedge.exe	87
PID 2776 wrote to memory of 2220	2776	msedge.exe	87
PID 2776 wrote to memory of 4988	2776	msedge.exe	89
PID 2776 wrote to memory of 4988	2776	msedge.exe	89
PID 2776 wrote to memory of 3044	2776	msedge.exe	90
PID 2776 wrote to memory of 3044	2776	msedge.exe	90
PID 2776 wrote to memory of 3044	2776	msedge.exe	90
PID 2776 wrote to memory of 3232	2776	msedge.exe	91
PID 2776 wrote to memory of 3232	2776	msedge.exe	91
PID 2776 wrote to memory of 3232	2776	msedge.exe	91
PID 2776 wrote to memory of 3472	2776	msedge.exe	93
PID 2776 wrote to memory of 3472	2776	msedge.exe	93
PID 2776 wrote to memory of 3472	2776	msedge.exe	93
PID 2776 wrote to memory of 2948	2776	msedge.exe	92
PID 2776 wrote to memory of 2948	2776	msedge.exe	92
PID 2776 wrote to memory of 2948	2776	msedge.exe	92
PID 2776 wrote to memory of 4564	2776	msedge.exe	97
PID 2776 wrote to memory of 4564	2776	msedge.exe	97
PID 2776 wrote to memory of 3432	2776	msedge.exe	98
PID 2776 wrote to memory of 3432	2776	msedge.exe	98
PID 2776 wrote to memory of 4856	2776	msedge.exe	101
PID 2776 wrote to memory of 4440	2776	msedge.exe	110
PID 2776 wrote to memory of 4112	2776	msedge.exe	111
PID 2776 wrote to memory of 1884	2776	msedge.exe	112
PID 2776 wrote to memory of 4924	2776	msedge.exe	114
PID 2776 wrote to memory of 4924	2776	msedge.exe	114
PID 2776 wrote to memory of 3828	2776	msedge.exe	121
PID 2776 wrote to memory of 3828	2776	msedge.exe	121
PID 2776 wrote to memory of 4128	2776	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ca\banklain\otplain.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffdf843c188,0x7ffdf843c194,0x7ffdf843c1a0
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,2398639817355207294,3274527760403299890,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,2273993360555009161,3317273088193175621,262144 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,11148210163945318491,14418411767457333857,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,10244707108507922087,18093475159612952872,2097152 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,4831074653633268939,15823793049676684721,2097152 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,16323776124325845995,4978646243714385028,2097152 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,13009250088933179501,5244365454343735437,2097152 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,10734741162869966228,7631334051938690991,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,18029485040847148281,16441017346774521448,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,4512868703752820049,5903763830387520918,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,4512868703752820049,5903763830387520918,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,7516561351397546167,18359263815487675995,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,14824864884155460335,10480782623986905515,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,1428811125537671511,8444053498382323211,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2868,i,16125201833308652183,16084242144652809648,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,5795961002458708204,10245553264785457818,524288 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,12846590448587603858,17856727866733396495,262144 --field-trial-handle=2220,i,416903148324904533,4794768724979833723,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

08f21e60-98ea-4495-925c-f68030379cc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08f21e60-98ea-4495-925c-f68030379cc9.tmp
Size 8KB
SHA256 cbd14a5f3bc6bbbb2a317d29f031a4428b7f712934e332beacd11d56d6ab13d3
MD5 c0b48acaaa32582fcfaf6d837cd2df4c
SHA1 942588a61bc5c7cf5ac1997b68c676a78a8580ed
SHA512 411af5804aaf2add34f1a8267fc14d70ad7c309469d794f6f5b897fd428d0d7d0b88b856d3ef2e3d0be2665f770d1b2a90210832d64f64af54499d35c5530cec
SSDEEP 192:EONp6nnHGQmiUybqQYcX5hQDP1bOt1ATcMcGFU6:EONp6nCNQNX5+DtbOt1A0uU6
TLSH
T10E02FB34BD687C778EF3AE46B58637175FA5217BE5942BC4D6E81E1C00DB65C230A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f7190e3-fd47-4ba8-841d-42ed337779b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f7190e3-fd47-4ba8-841d-42ed337779b9.tmp
Size 21KB
SHA256 467ec92edf32bbc638c338f17cae8765be9b4723b3b7f82fe290b075ba5372dc
MD5 c4e8de329d06e4143aef1a610155c0cc
SHA1 5962a54c85af54723c2fea005a25571f94b2352d
SHA512 bd316ea538794aaf27915a8df3773a4396ed749bbef53d703e033c7aac14ae23b77a729b5caaefcb9efaf730dc21368f85ff006d68884ade73f34df7bae2ec6a
SSDEEP 384:1iFiZcIZzsNi8TUNTUlIldemvi9sZQX5+DtbOt1AzmJrWWltgOIwZOykozoG:8FQZXwgCmvtekDlOkzmhWWlXswz5
TLSH
T1A9A28D339CA49D7BAEFB9A85F68A32039FF44067D5C5EAD0E2DD6E1C019A5DC130AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7481989667805f861819a64a3969aaaf46d409d3cc4fe4b19154b579a00c6e16
MD5 a70a868c80f3eeab924f0b5bd11ac679
SHA1 22ca93079bed2cfcd0fa02ef66751ff5288ac608
SHA512 380ff0ee96c6b0037a0ca6f886ef323cc451588842ad026ea5bd4a5e33587abc8a13aec63444eb9137cad40409498bf6e0730b0a623f020bfebec6de03bf7d19
TLSH
T1C8D01103FB828A2CC8C008B2002C822C0A8AF8000A00A2828030228A8C28A00A02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

56339d1d-b6d3-4211-b029-30646f1634b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\56339d1d-b6d3-4211-b029-30646f1634b3.tmp
Size 10KB
SHA256 5365f8c28292bb2c5d83f3bb7795ec9e61a1bfe340bd40d4cac758f70fcbbeec
MD5 232278fc5037694876d19318bdfaa574
SHA1 4db31a236c2d6187652869cd4ce866448c1720d1
SHA512 1c12b529fbcc930b98716908c0fb21280ed3601b791ea896ada755c971686417eb327c2cbf5ada63af6f757bc64412089a3f22d9d68da9ba5557b9fe48a92e70
SSDEEP 192:sxZS/RvWH/fss3OIdpdeHW6+WNGYYBUqcIg5rJ:sxZg8H/fss3fsHbGfGD
TLSH
T17E22B8116E28797B8CCBE20DBB557F53E6F9503251911E48AAFCD61C05EBACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a018cd4-91d1-4f85-8415-14a04665c094.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a018cd4-91d1-4f85-8415-14a04665c094.tmp
Size 10KB
SHA256 6b4d8fb36d495b7fd1a0025b7bceb0f92ce380367a656f6e1d419ac51133da7f
MD5 6aad2b8ce856e6058caa3dba20181af1
SHA1 07d9c226744d935ea2618c32b9ea785b6359fb36
SHA512 e149cd9bbbb02d542155097a69ee7db8ba95b7a8c10f2f69c6aecea628a8fe574df7b02238a784a50a6816bf6442c0bda22787f1b2a4cc699bddbff1f02a1163
SSDEEP 192:sxZS/RvWH/fss3OIdpHeHW6+WNGYYBKqcIg5rJ:sxZg8H/fss3f+HbGfUD
TLSH
T1E922B9516E28797B8CCBE20DFB557F53E6F9503251901E48AAFC961C05EBBDE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6161a1d0-48a0-4cb6-861a-6a5056c53a50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6161a1d0-48a0-4cb6-861a-6a5056c53a50.tmp
Size 9KB
SHA256 5020513950c1ad995736d8c9431a15128074c2137066ad3b7b0587fa487b4bbc
MD5 1d58442beaedbb05c56d73fad7fba06e
SHA1 f83b5a58fda3025f48c2dfdf71021060f33f9bf7
SHA512 9ee3a99d8207236c737a969fb1ff555d47188ba19cfc43849c1628e94acab8d01f2bc3e68ceba1832735a9ba0370b3b2da2f4e081db398131eec868c537ae316
SSDEEP 192:sxZS/RvWH/fssHOIdpdeHW6+WNGYYBaqcIg5xJ:sxZg8H/fssHfsHbGfEN
TLSH
T1B622A8116E28B57B8CCBE21DBB55BF53E5F9503251D01E58AAFC961C04EB6DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e7f5564-3e4b-434e-84ea-75e0bca75711.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e7f5564-3e4b-434e-84ea-75e0bca75711.tmp
Size 9KB
SHA256 a41cbb034c840837b9f2149e52d36bdd63e8b1b565767bdaa6aeafa91c3f5006
MD5 3d9d3879be5926309e6cbab7c40ad67d
SHA1 831184056d86e92af9d7c5f3123909a6533425e0
SHA512 a9b0eb94fb12645455786f4e1790d7addb6c9f487ef75bbdf3c03718bd14d075c82318932cebf0d74100ab09045669773846849344e413bf00cd86ac365b5600
SSDEEP 192:sxZS/RvWH/fsseOIdpdeHW6+WNGYYBaqcIgrJ:sxZg8H/fssefsHbGfE9
TLSH
T1E52297116E28B57B8CCBE219BB55BF53E5F9503251901E58EAFC961C04EBADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4dab4ae5a2328df622379480cf59cdbc1a3792894f68c8366f4e9579a015eb47
MD5 b38ecf0e00103c1a7bfc3825a5b3a09e
SHA1 550a0f8fd3fe4893fcb743ece3e499d805ac724d
SHA512 c5b260802a7df2577eb64b6c00d82d52bce6e26c8782728eeec4b3eeedf044fb1df0306e7018076a17ab9bcad705454abac20d5875700be47a9875508ab564fa
TLSH
T123E026EE06C8C22EB2086A4F11BC930C8380362B92C0EE0E2F04F58C7805044A3826F5
MD5 SHA1 SHA512 TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 423KB
SHA256 80312ad7b2e83cf58248d9945b0fd66bc03790705e86777077e7e04263a0ab02
MD5 6ce8f482e7377893233dec2a07130585
SHA1 3ee1d8131f335c20251f3cc87eea48bf455482e4
SHA512 9e83271168c9162cff0edbd6ac39d99ea1ee91e07ea25b542c584d1256d35673c00aff2c67778757b18a996427d510ab9972b48a60d86aaf664cc9c700fb226d
SSDEEP 12288:Vin+n25olbYYsdKQlqRpswFkEhfNwkxUCo9:Qk25olbFs0Ql6pBGEhfNw
TLSH
T102942204A9E0A123E79D4ABE867853A043F94244D32207EEFC47BB3789FE6D746C7254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 932df17b58f2e65a267f91fddf98d50f98f93d0884a64ba944cf7d2e12dde081
MD5 7e6ff2dba3f3f5d325bfa7b07424438a
SHA1 aea05487ad2318ce0b606d19e9febc9d44e29705
SHA512 1ff2048e66462579c5eb1e50b3d74f5bc9803b97374470a5b7031c245e7e17de4bfe08dd8b73245d618dee3ba9a17ff48bf244fae2caeff14ca3f7bb8d8678ea
TLSH
T1EE619280177382DDFF58A6B551C513CB3232B389899BEC4215B4CB7AF80A79CB012D0C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d851a41f94efc0c3dce5b7cd5fa6c26cb8cf339afc5f341c7dafba8d33fc6323
MD5 1da03694ad5f55e69e46a7eb1db8d5e1
SHA1 6e349ccae2bcb2948a38534acb1333ac3a144c23
SHA512 dedf88a15bcab2991440fd34621d586ae7fc3e01489b325b83cfc1391ef9586689f5713ffd03f3a32703935e3210433b86915e61fbeb6ec9d911ff0b19e47784
TLSH
T1B7617180177382DDFF54A6B695C553DB3232B789899BEC4219B4CB7AF80A79CB052D0C
MD5 SHA1 SHA512 TLSH

Submit Download

eb29a999-33b6-4d7d-bfe1-48f3a4d0a579.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\eb29a999-33b6-4d7d-bfe1-48f3a4d0a579.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

06ace1e2-f8a1-4c3e-8c33-b662991761f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\06ace1e2-f8a1-4c3e-8c33-b662991761f2.tmp
Size 1KB
SHA256 7791b5e3298a43fea23da6636efa724fb052d770ad74e8fd1fb4348661c5d575
MD5 b4f09764b14f59f048c6c01d51b40767
SHA1 9c6ffe875ea2cccbcde2b825d3441d238b1566c1
SHA512 53a2cadd2f842febe665b5560da038792175c4a18e30ff519e77b8d9fb53d940eeda43b3bef210f072514157c4231d879ae37bbdc5b1748d9171224f2eb9cd86
TLSH
T1E3416AFBC3D4876E990156F05A24BE2ADE1D451A422C3C1AC9E4EF9FA3E2471D1026DF
MD5 SHA1 SHA512 TLSH

Submit Download

8af9de69-ecfe-46cd-993b-aeb802e08088.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8af9de69-ecfe-46cd-993b-aeb802e08088.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d9962c6f-332f-487a-b237-5060a404baad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d9962c6f-332f-487a-b237-5060a404baad.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

afaf8d7b-069c-4e29-87ff-cdd9f95cc031.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\afaf8d7b-069c-4e29-87ff-cdd9f95cc031.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e49e2583-7aa8-47ac-a93a-92c3fb11bc05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e49e2583-7aa8-47ac-a93a-92c3fb11bc05.tmp
Size 27KB
SHA256 1da2af5b91b9a8166edcbc1950240ab0d1ea0ad535070d6518a7d09ae87e5ac0
MD5 76e25e5fc2bf4e2f28a01bd4772bf444
SHA1 6eb4ab14d643565a4b3f73f46efadfdd334dd934
SHA512 7cd74fd5ee0ae2d213005f97b3c7947f1606e378d18f7815246f60a107541d724bc2f50ad959b03205335d9f2b5baceace3ac63f87530b4b28ed90623f3bbaad
SSDEEP 768:nYyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXUrop7/t:nYyYR7jWv3NpBu1ja/CL8OX/H
TLSH
T14EC2E92F640DCB7E4FC01A9DDC5A6F9B3E9802C7A6548D4047FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64a02e8c-f404-4719-84b1-74b7c6e3a7ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\64a02e8c-f404-4719-84b1-74b7c6e3a7ac.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3cceea1-9d0b-4524-a3d1-f87113be506e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a3cceea1-9d0b-4524-a3d1-f87113be506e.tmp
Size 18KB
SHA256 77c6ead8883cb12b101dd43254dac0a98ba12d9d782f465c5d946761b4915435
MD5 04b5502a077d879b2469c4a083472232
SHA1 5a1b8c7145ba68ed41f7462c3f4af4cea2bd8bc0
SHA512 712367b75016c4e3b88f68ac330b79f98fc1e898e3f50336b77ce8a103a3e66052e36fb248c5938359afe1dfdd982a851883a96f4fde41e4861e86fbb9ddccd4
SSDEEP 384:YZcIhsNademvi9sZQX5+DtbOt1AzmJrgWltgOIwZOykozoG:mhamvtekDlOkzmhgWlXswz5
TLSH
T11D828E31AC746D7B5DFBA185F58632039FB89067A2C9ABC0D5ED7B1C01DDAA8130EC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2ad0ee1-5925-42f9-a33c-a8e998560113.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2ad0ee1-5925-42f9-a33c-a8e998560113.tmp
Size 18KB
SHA256 422ed126a1e0834e86dbeb6db54f1aad5d3ad6903eb20a36be82c30ee0b2f4f5
MD5 a9d7b67124566fde0572a8bc2a16708d
SHA1 ca5fcdbb6df814cba2bc10818dff09fb088acbfb
SHA512 cf60134f8b752ca98f3c9d2d48306c0c6e3680ec024b90cefa037c511bbde2a5b45a46f1a297de55711bdbb8031943bb980b83b854fbb78856e6308492c523f7
SSDEEP 384:GZcIhsNa0emvi9sZQX5+DtbOt1AzmJrgWltgOIwZOykozoG:UhZmvtekDlOkzmhgWlXswz5
TLSH
T1FB827D31AC746D7B5DFBA185F58632039FB89067A2C9ABC0D5ED7B1C01DDAA8130EC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed02329f-4c15-412e-a295-602627f1d908.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed02329f-4c15-412e-a295-602627f1d908.tmp
Size 8KB
SHA256 ca4c032ff7a5800eab3d1d1615d0315a49cd0119b4cd29045871ecddf2f14262
MD5 c6f1dcef9be5fafafe5515de70b456ec
SHA1 3a656e86f9a78f5f172bf1a61c29543a2ab7a2cc
SHA512 111b2da4881e5763b6eca8418e2047907a84c01fc0158aaa6ffe32922823f8ccc677ab321dc94872f3521acebdac4c17f3b44ca32af4c17e899538bb244c6fda
SSDEEP 192:EONT6nnHaQmiUyeqbYcX5hQDP1bOt1ATXhhSJrwg3Fq5lU6:EONT6n2EbNX5+DtbOt1AzmJrrWlU6
TLSH
T16D122B31BDA4AC775EE26581F08732139EA55267E5887FC4D2DC3E1C01DEAAC230DC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

269726e9-968d-453f-a3cd-668e354e0ad9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\269726e9-968d-453f-a3cd-668e354e0ad9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a5bc3beac4b9ba411f48c185133fa7b85a1cb2936a184da6c7889ad23ddc536f
MD5 b7c11113e4c7f3abe679ffef32747587
SHA1 6eef398932fcb5904cac20db663110584b6cd106
SHA512 1ea37b2efba712254e9714b7de157e2fbedcdb8319ad92d234bac01379a989d1d8477423e9561e6f10eb50f599e06dae88ff0468b01fc459086fbd206aebe988
TLSH
T1DF412848B6E91108B3B36E16AFF7A92D487B7C772F06C09D10010E5F0626B00C872737
MD5 SHA1 SHA512 TLSH

Submit Download