5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-sfqvei.htm
Size 194B
Sample261002-pt6vxssdrd
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{32DD412A-262B-4A73-A5F8-2314A1AF09BC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2380 wrote to memory of 1152	2380	msedge.exe	86
PID 2380 wrote to memory of 3048	2380	msedge.exe	87
PID 2380 wrote to memory of 4648	2380	msedge.exe	88
PID 2380 wrote to memory of 3048	2380	msedge.exe	87
PID 2380 wrote to memory of 3048	2380	msedge.exe	87
PID 2380 wrote to memory of 2384	2380	msedge.exe	89
PID 2380 wrote to memory of 2384	2380	msedge.exe	89
PID 2380 wrote to memory of 936	2380	msedge.exe	91
PID 2380 wrote to memory of 2304	2380	msedge.exe	92
PID 2380 wrote to memory of 936	2380	msedge.exe	91
PID 2380 wrote to memory of 936	2380	msedge.exe	91
PID 2380 wrote to memory of 2304	2380	msedge.exe	92
PID 2380 wrote to memory of 2304	2380	msedge.exe	92
PID 2380 wrote to memory of 3820	2380	msedge.exe	93
PID 2380 wrote to memory of 3820	2380	msedge.exe	93
PID 2380 wrote to memory of 3820	2380	msedge.exe	93
PID 2380 wrote to memory of 4048	2380	msedge.exe	94
PID 2380 wrote to memory of 4048	2380	msedge.exe	94
PID 2380 wrote to memory of 4048	2380	msedge.exe	94
PID 2380 wrote to memory of 4976	2380	msedge.exe	98
PID 2380 wrote to memory of 4100	2380	msedge.exe	99
PID 2380 wrote to memory of 4976	2380	msedge.exe	98
PID 2380 wrote to memory of 4100	2380	msedge.exe	99
PID 2380 wrote to memory of 4448	2380	msedge.exe	101
PID 2380 wrote to memory of 1964	2380	msedge.exe	112
PID 2380 wrote to memory of 4808	2380	msedge.exe	113
PID 2380 wrote to memory of 4948	2380	msedge.exe	114
PID 2380 wrote to memory of 4724	2380	msedge.exe	123
PID 2380 wrote to memory of 4724	2380	msedge.exe	123
PID 2380 wrote to memory of 2812	2380	msedge.exe	126
PID 2380 wrote to memory of 2812	2380	msedge.exe	126
PID 2380 wrote to memory of 1684	2380	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-sfqvei.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffabe77c188,0x7ffabe77c194,0x7ffabe77c1a0
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,8522387656163610910,13300713052202261191,262144 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,15652358172181623938,12311825139155775107,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,11005651320932320112,5049852510314481654,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,16036643969864387841,8113926226872775230,2097152 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,11012668769031414667,4842214290416920954,2097152 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,18125301740478906200,14571110686246390130,2097152 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,9457723507282309603,5036124635337535479,2097152 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,5801421440165794109,4073040076636302823,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,81489259218528204,8700084107957650625,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15037796651518808493,5197091219818726039,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15037796651518808493,5197091219818726039,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4816,i,8401740154170322125,15828834398671658685,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,10068544670800857412,11177824542556858068,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,17699169256632461123,1760185475675653841,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,14345702576982221905,2686677409931621006,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,3571197330190293836,12655959581015851601,524288 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,10113413867064581299,13523158418390199659,262144 --field-trial-handle=2244,i,13772732076406685792,13004395101598996429,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4c017e1b-3ab0-4253-aae0-2e25c0c7e749.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c017e1b-3ab0-4253-aae0-2e25c0c7e749.tmp
Size 8KB
SHA256 926daaba5b966d9a3eef2b9da6857cd8bcaea8c7e2c24bca8b14c9fa706c8206
MD5 01a1465cb16f893b8eff2e2e8bc90b5a
SHA1 604b2b99c1e0917a73b57afe42ad407b2059042e
SHA512 36d352ae8822687dd4e037978c198db5ac6107475b9e8e10fb73c7d783cb2b4d503a684c99a63897144f763fc259922270e9e83073dc341e28ad483b12e4c13b
SSDEEP 192:LJONV6DphmqQmiUyIjq8wGYX59ezWCLEsXkk7XNbU6:lONV619TRwGYX5EXLEs/XpU6
TLSH
T12202FB39A8787CBB9DE36E45B58B36139FE4212FAA906F44D6E81B1D00C768C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56888ea4-5acc-4fbc-a0dc-da95c6a7bca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56888ea4-5acc-4fbc-a0dc-da95c6a7bca6.tmp
Size 8KB
SHA256 ffd7caac6b4ced5b3350eb0d9d6fba576f3e26083ca5e79c74e3e2dc8ca2f3f9
MD5 3bf5775532dc34806032af2a85ddee1b
SHA1 a3fe9ffa6917164e22c58047b6e6ba6db32b5ebe
SHA512 e89cc8178864e2f03f8aa9b5bbe7e0808999445471a1f53cb79f08c671844740141f68b04d4aab9eb0bb6174dcc8a76815eab95907a9eaf0847c39f8ed5de8ce
SSDEEP 192:LJONT6DphdqQmiUyMjIwGYX59ezWCLEs9XlaPwo7fZkIIXpq5CU6:lONT61mTIwGYX5EXLEs9XlaYo7fKXNU6
TLSH
T1AB121935A878BC6B5DD36591F48B35139EE4922BEB887F84D5DC1A1C01DF29C230B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5956a49d-b4c0-4978-a16f-fabc18379ee3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5956a49d-b4c0-4978-a16f-fabc18379ee3.tmp
Size 18KB
SHA256 6c8c98663240869a26bb5418adef8102724682032e5e71fc3eb55053f9d12451
MD5 0c751088ab9a2e5f1a45eb6afa2df82c
SHA1 13ed91ecd6635f755f8234cb887ae6cb41a8030d
SHA512 7b599b59690ed27c244aa9c25d24624387f2b8ec86600c8fcac3f0846da5665b55b44a68978abb6eca694e74b425c75920fe3f30f7cac0fc4968d56d0f01ad9c
SSDEEP 384:cZcIhsNCje15vhI4BGYX5EXLEs9XlaYo7fTXNtgOIwZOyvocoK:KhVEBiiGYuXLEs9ETTXNXs9cF
TLSH
T174828E329878BC7B6CFB6181F58B36035FB89127A7C4AF5494EE5B1C00DA5A8130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71e38b5b-9f2a-4c58-b249-f30f47850b46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\71e38b5b-9f2a-4c58-b249-f30f47850b46.tmp
Size 18KB
SHA256 86e5eebed54cbcdc3c355e0c2d80e9be0a9215769fd20deec177bc353ddb8a03
MD5 4cde7d49fc3f8583c04697d2104791f8
SHA1 d1c3859d71d9e82f857b3a91f35a9d345d81757f
SHA512 bca3e8328dabdeb046a0d448b800623dcdd1f8bfccf880709503f5a9bcecbebff2b160e0ee6d55f1e4f2be224a66433724a3edda57c514521796893f94565593
SSDEEP 384:EZcIhsNCae15vhI4BGYX5EXLEs9XlaYo7fTXNtgOIwZOyvocoK:ihoEBiiGYuXLEs9ETTXNXs9cF
TLSH
T157828E329878BC7B6CFB6185F58B36034FB89127A7C5AF5494EE571C01DA1A8130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

23400b90-fa81-4cd0-84cc-6290c024bafe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23400b90-fa81-4cd0-84cc-6290c024bafe.tmp
Size 9KB
SHA256 0c3e4b11c1bae89ca6a73fb67b1760653e004a8f029e9644a8adc966521323bc
MD5 a7f59db4f7ee5677e8432596af0951c4
SHA1 de9efeee9d75b6d0278d90cf46db8fef5afff299
SHA512 f0f74c245547b84bee67f672b655d72462d44c7fe8b97182793a1562b7b177fda35759bfba56e474f7b5ef33f60df2c7ef019866cd7ad7cdf8c93c6cf0bbfcc2
SSDEEP 192:sxZKRzWN/fgsztrIdpdRHW6+WNGYgUfmIg5FJ:sxZKYN/fgsB0LHbGPZ
TLSH
T14E22C8126E34B97B8CCBE20EBB557F53E5F9503291D51E48AAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23956e77-a0f1-42a9-bc73-b0eb282f9375.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23956e77-a0f1-42a9-bc73-b0eb282f9375.tmp
Size 27KB
SHA256 1dc1de1196ddb4f2c5ae79d80a6baa3ab1557b3fc6ba4b694633a5903d23b803
MD5 7e5504d0c4faa4e7a1aa6984c38cd532
SHA1 0bb9af1174a764f16199c967bed659080e0c5bbe
SHA512 0f3815416af5ead84bba700b9128d08b66d836a8f93df7106fcb35915b830ae499320d8725e5ae878eb951c761d876491fae1adf8c57d2ff00583799c8e2a199
SSDEEP 768:IBichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzjroNivb:IBichfPWvPZplu1jan+LKgzQEb
TLSH
T198C2E93B640CCB7E4FC01A9DDD5A6F9B7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33b7fa3d-a277-4bca-8f42-1705e8ecdbea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33b7fa3d-a277-4bca-8f42-1705e8ecdbea.tmp
Size 10KB
SHA256 604ec8cb5174f74e49eb9c9819343f86baba1e6901d4c5c99fe67016455663b0
MD5 ccb19b51cdb41a27be7c86e6f11e92d8
SHA1 9c45259fa93bb79d911d312209ae1d391cc71eb1
SHA512 2381293c5a8d64bd1a905bcc67f5495996b6e26b82052ff2f4ca8c0f0001b868025c205c4ca1708f1e65d9ed28bba422ac70da69e2f9e2a2e71ff63be1ac833c
SSDEEP 192:sxZKRzWN/fgsgtrIdpHRHW6+WNGYg1fmIg5vJ:sxZKYN/fgsY0xHbGKv
TLSH
T1F322B8526E28797B8CCBE20DBB557F53E2F9503255911E48AAFCC61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

948028b9-1e26-46e1-b0e6-970cfafaefda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\948028b9-1e26-46e1-b0e6-970cfafaefda.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 0001f3f3a1b7d7b6602310ce2568fce197b8d576de06c1fa3bd91b6a1e0d57b7
MD5 b0e6dac635cd93be74f7b247ee492946
SHA1 82611b7fd0841a7435a9d8eed39a274cbf389e44
SHA512 d069c25416a83494909946c17d936694c4d875bfc34962f65907ebd7bbeab589746c308c6e75f880f2d0a0928d4f6d937a23ce14f78f18bc9d4d4ea5cc7d2076
TLSH
T1FFE0D8D465D5C61EB30A685B56D8A70CC288366BD7D0B90D5700C549780A540A6D26A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7dc19a5b64fc30fa55cafbb5a5b4c9751f4bd9dd5defff65582808679e0fdf7e
MD5 0b82394b788da8076bc6175c2491ac3e
SHA1 c6af9e6a1c7c62dd1ae8ccbe1ff91b5d8b41b0c1
SHA512 3c26f3f5a7058204b384222915c271132377481b3c5bfac718e1aca62710cbaa21f02ef64ded6116d1741512aa53fa5aab593601fc18578584fffed97a9145ca
TLSH
T1835192B0BF8481A9F798627C9DCA02473E34998558B77FCC11E7CD7AF80A71E2125E44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 56588d3c49a20e1d7af375824e3f18bfe42297c076b56f0d82779dbe559137a4
MD5 11603758de5655026fc35a330c6def0c
SHA1 59bf239336960e79bbc2e4947a30d077b68603f6
SHA512 2b39c74283e426bc583b94bf5c93d84e4898383162a8649cdbe777484ae9a3ceb10e400220b6a01038e5d67eaea8e3c51322f6008b67e262455ee2fa62739415
TLSH
T1F75191B4BF8481A9F798627C9DCA02473E34998558B77FCD21EBCD7AF80A71E1124E44
MD5 SHA1 SHA512 TLSH

Submit Download

0d832e27-3100-447d-962e-3b8a99db2132.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0d832e27-3100-447d-962e-3b8a99db2132.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

01464b26-c242-4722-8510-46b87ebbfa4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\01464b26-c242-4722-8510-46b87ebbfa4e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

60b0f501-2106-435d-be52-d23975d48d4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60b0f501-2106-435d-be52-d23975d48d4b.tmp
Size 949B
SHA256 5fcaaeb4adf1d5324ed54bc1a94ac05d005961b0e816cec3fe9833a1ff9ed8ca
MD5 0d7984543404e04f5278945dbb935c9e
SHA1 e5da6ca3eee1752423fd1401a59295df130c86d4
SHA512 61219d3b8f4dd8afd306142939d8032fe9f7aca20eae282b2659f64f1e24f4f32d4c52e4a3e7b8ceaca4312d2064bbe030127072bcb8c78d5e96d4e66ae132c0
TLSH
T18E117DF3C3D585AEC91116F09A24EE2BCE1D0506421C7C5989D4EF27D7E3075E10259B
MD5 SHA1 SHA512 TLSH

Submit Download

92737f12-4977-4efe-948b-73c79a4bf5df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\92737f12-4977-4efe-948b-73c79a4bf5df.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b600cf71d10f1c0867ec1fb6a2a3e03d477292d16908d1ea749cba6d41c0f9ec
MD5 fd34566f8f1dd5df305daf03b5814030
SHA1 1a2ee9311bf8d24c6a352faf09c8ba4eecfe4892
SHA512 55bc42078db1a4207cff7ab506c5bbc9fa2332c28e5a9f253a41bb6d14a51cec1abd2891b4733c6bd0ba92e9bd290e046d85b34dc33bc5d1867b2f34d36a5a20
SSDEEP 48:K0CNQ8CgARbcrMISURK9Y1iRxaBYDUAyyLJ4FZDHb0bni/ISx0K9x1b0xZkYijGV:KQNqKu0CC+oKDCE5GKCcsN
TLSH
T1B591501275771390B8BE254842A49AAB4A4232F73124EB2B7FAC41D64DBFE045DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b177d0cd-6e92-4008-84c2-3677a755bbd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b177d0cd-6e92-4008-84c2-3677a755bbd4.tmp
Size 10KB
SHA256 32f801a4d1dcce1ebe992474e94836fa78ec9600af93bf1d3e4325b5d72d5833
MD5 70eba5e4cf04b5251d54b9accd281245
SHA1 b082f54bee5b64e482c7ef0bb9ff72b5b9c95d4d
SHA512 02df46d2d5dd9555d89ca2aba6f4faeb542070222273fbde81176a6d966eecc0c5a38181f07db39d2ebc669e042f99701aaf8a3784b28940b39caf163185ba91
SSDEEP 192:sxZKRzWN/fgsgtrIdpdRHW6+WNGYgGfmIg5vJ:sxZKYN/fgsY0LHbG1v
TLSH
T18822C8126E28B97B8CCBE20EBB557F53E2F9503255911E48AAFCC61C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdde9f3f-247a-4573-9ee2-d6477ea94d3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bdde9f3f-247a-4573-9ee2-d6477ea94d3a.tmp
Size 9KB
SHA256 4e2e4e5fc66dbba02199cefcbbe170ccfc0ff8cc8c06b3998b94d04deaeae686
MD5 98ad6f06fb1bf064a6f16863cb4bb681
SHA1 6adab5f220acf0bac436468345e61cae1fada91c
SHA512 d5af74b0d21c2d630985578cffc12ead943d0ffff2da6d7f8e6a0f1d61edfa2bfc5c4bc527c899604db107b813b846e367f4daa25b2b2ade32e6334f4009384c
SSDEEP 192:sxZKRzWN/fgsXtrIdpdRHW6+WNGYgUfmIgrJ:sxZKYN/fgs90LHbGP9
TLSH
T12D22B8126E24B97B8CCBE20EBB157F53E5F9503295955E48AAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb38bb95-bdd4-4e95-812b-1b0e2b2b74b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb38bb95-bdd4-4e95-812b-1b0e2b2b74b9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cb84c93e-0177-4352-9da5-f7ad9596eb8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cb84c93e-0177-4352-9da5-f7ad9596eb8c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d58f6075-fd75-44c0-9054-67930daf3ae5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d58f6075-fd75-44c0-9054-67930daf3ae5.tmp
Size 21KB
SHA256 ec37ff027bc7a944aeee8e7fdbe3b317ab923e1284d9ed7043a1ff33f146e378
MD5 27bab9b32147087e5e270a711caab2a1
SHA1 12fb30030b6aa68c86ee39016f639f723b290b55
SHA512 c4bbffc4c6c916e238938fd7c9f04ac0954e6b7b530366e48c7a8b61618e8ea7a255b1f214b780aff99db0cd2d83dcadf64ffb23b692219a2c4cf662561ae610
SSDEEP 384:CiFiZcIVzsNa8TUNTUlIlje15vhI4BGYX5EXLEs9XlaYo7fHXNtgOIwZOyvocoK:JFQtTwg5EBiiGYuXLEs9ETHXNXs9cF
TLSH
T185A25C3388B4ED7B6DFB5A85F54A32038FB45127DAC5EB9096DD5A1C00DB1E8130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78856e2a-5b9a-48b8-bc39-3470c363bec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\78856e2a-5b9a-48b8-bc39-3470c363bec5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 29bc7693d7f39089a21f25c1e6d8c39ef6e1fca616c272e51190aa7bdeaeade0
MD5 74814a74ebf6cd58a9e9233b8c168975
SHA1 0bf1d8eacaffdc13e685d86230800f1ad1c3f72e
SHA512 6ee653fbd52fe36f337a34f4df664c1434d77349b8804fc3dc85c0f12e88a458d52d7fa2b666e26f68b6e6a2bf9d251d10069bd4bff27322df7b17d0cce35718
TLSH
T15641D858BBF91158B3B76F1AABF6A86D447FB8272E06D49D10110E4E0A62B40CD71733
MD5 SHA1 SHA512 TLSH

Submit Download