3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-melauz.html
Size 171B
Sample261002-pvpm2axtaw
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1460	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{9D0A78A8-E52C-41EA-9154-26F4A3CCD819}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 2556	4620	msedge.exe	86
PID 4620 wrote to memory of 1460	4620	msedge.exe	88
PID 4620 wrote to memory of 1900	4620	msedge.exe	89
PID 4620 wrote to memory of 1900	4620	msedge.exe	89
PID 4620 wrote to memory of 1900	4620	msedge.exe	89
PID 4620 wrote to memory of 3008	4620	msedge.exe	90
PID 4620 wrote to memory of 3008	4620	msedge.exe	90
PID 4620 wrote to memory of 1728	4620	msedge.exe	91
PID 4620 wrote to memory of 1728	4620	msedge.exe	91
PID 4620 wrote to memory of 1728	4620	msedge.exe	91
PID 4620 wrote to memory of 2352	4620	msedge.exe	92
PID 4620 wrote to memory of 2352	4620	msedge.exe	92
PID 4620 wrote to memory of 2352	4620	msedge.exe	92
PID 4620 wrote to memory of 4536	4620	msedge.exe	93
PID 4620 wrote to memory of 4536	4620	msedge.exe	93
PID 4620 wrote to memory of 4536	4620	msedge.exe	93
PID 4620 wrote to memory of 1720	4620	msedge.exe	94
PID 4620 wrote to memory of 1720	4620	msedge.exe	94
PID 4620 wrote to memory of 1720	4620	msedge.exe	94
PID 4620 wrote to memory of 1644	4620	msedge.exe	102
PID 4620 wrote to memory of 2148	4620	msedge.exe	103
PID 4620 wrote to memory of 1644	4620	msedge.exe	102
PID 4620 wrote to memory of 2148	4620	msedge.exe	103
PID 4620 wrote to memory of 4960	4620	msedge.exe	107
PID 4620 wrote to memory of 1668	4620	msedge.exe	114
PID 4620 wrote to memory of 3240	4620	msedge.exe	115
PID 4620 wrote to memory of 1244	4620	msedge.exe	116
PID 4620 wrote to memory of 3892	4620	msedge.exe	123
PID 4620 wrote to memory of 3892	4620	msedge.exe	123
PID 4620 wrote to memory of 4744	4620	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-melauz.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ffa1396c188,0x7ffa1396c194,0x7ffa1396c1a0
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,5863826718922398833,448014804132572220,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,3930690461502841924,14348931615274489210,262144 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,13361458310047291006,7529284100113712777,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,11186068915033637499,10125368405514898069,2097152 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,13285791042089016898,17925343902996466417,2097152 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,131029579509368063,9820742080150988651,2097152 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,557204216063102137,4439166064582577175,2097152 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2120137227038738383,6575693681851175022,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16871272054031242452,14803428855557592256,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,10676145324472004889,4085801258445566497,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,10676145324472004889,4085801258445566497,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,8488882721358545092,13285437333115289661,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,7592041883050321593,5840391573075198766,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,11928116037136968671,5150887922252481778,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,14622785411628574321,4249030734699898481,524288 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,462034060824541437,5831426006826516275,262144 --field-trial-handle=2324,i,988726046264555235,3749372429698182215,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3a287c86-e790-4eab-87ad-f59051971aeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a287c86-e790-4eab-87ad-f59051971aeb.tmp
Size 8KB
SHA256 eac8e0407402236e0a9bb49783423edab13aa82f9f36ff4cf354633c3e38806e
MD5 fef6fdfedced9191df7a6abff1d334b9
SHA1 fe9263b1054bf098f155e10dbf80450174e29942
SHA512 8554bacd30ae0c5c4611d973eb3190305c77fbed0262f7722fc3ab49b9ba50ef6cb1f3d38103e056bcd3e6696a3544da0d3dfc26a668184172e47e34d232495b
SSDEEP 192:aONi6IEiQmiUyGV9TmuIGmQ2msMN27H6qIU6:aONi6DeXjmuIGmQ2msMKHwU6
TLSH
T152120A35ACB8BC679E93A945F4833E235DA58227E6C5BF94D5DC1B1C00EF26C230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69ca2756-ef9d-42dd-bf16-a35b9ecf4144.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\69ca2756-ef9d-42dd-bf16-a35b9ecf4144.tmp
Size 21KB
SHA256 e1fade46469c9af6a1b5863b6da5a597e69921bbf9ee61953411e8d79841f0ee
MD5 b14c0caf206840db1eaf0d4e016ef3e0
SHA1 d4fdd5ac413a8286b126726dc5c14ec50ac9e928
SHA512 8f90811374358ce10e45ff6b6a86bd579dcbf0f389bafa0662b0e81fd162293f78e612114f6ee421a9dd75198b3ad90db18518e8bfc328cf52d825614692e7d2
SSDEEP 384:DiFiZcIWzsNB8TUNTUlIlW01Hemp4zIGmQ2msMpriwtgOIwZOyFL3od:uFQmAwg1EmpKT2xAriwXsODW
TLSH
T1B6A26D738CB8ECBBADEB9A44F54636038EB48167D5C5EB90E6C99A1C00EB1DC130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce1c4338-c8c2-452b-89f3-d72f0770fef0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\ce1c4338-c8c2-452b-89f3-d72f0770fef0.tmp
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e73b391410b47c494ee7953905a0c60fd04c6bc35617583539b46b92968689a8
MD5 c67fbef7f62bf0056c3e3f786716b78a
SHA1 45f832458a5b84f29df5280a7973ebf46d014c4b
SHA512 623599849df6e275e849b53aa15de4c0c6df018ceb72805f4afbfea2a8577410fc6f21085b8473298805a9eec11bfc75b61276472cfcad39c54461995984dd1a
TLSH
T180D0C0F0CEF896F0F031343C01344142308C274122021211B432001C0C900C34265DE8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

1a5d19f4-3dcc-4bd2-ac7b-626fe808063a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1a5d19f4-3dcc-4bd2-ac7b-626fe808063a.tmp
Size 10KB
SHA256 c014ef5a22b87b49289fe2cb9057cf9d15df4c815d797deb33de0a46a858ec0e
MD5 b8243195a6ffce1ba49bf4eae41a3baf
SHA1 76ad4ff35e2b3a2d933f9d0aa7b297396123eb21
SHA512 fb375f8a746fe2264d996509cac16fa3eea86552f034cdcc67a60cd59b23b5d3ef6d9fbc56d03c37173e2c7d0cea7b2a72e8919634808ecc1672c37a71a1929a
SSDEEP 192:sxZ3RdWS/fns8oCeIdpdFHW6+WNGYap6w+HHIg5yJ:sxZ3GS/fnsFaHHbGxeHw
TLSH
T1E822C8516E28B97B8CCBE20DBB55BF53E6F9503251951E48AAFC861C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27abbdb4-7b31-4f3f-81d7-b09dfe6789b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27abbdb4-7b31-4f3f-81d7-b09dfe6789b5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52c07682-b2c4-4862-8471-dc86a0dbd965.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52c07682-b2c4-4862-8471-dc86a0dbd965.tmp
Size 10KB
SHA256 2d10e3843ad27613d3866ab9305f47f2bd6d131cc3ff1994c421bcae09cbd157
MD5 ec3ebf8d04d27aa7647228d2c94e1f6b
SHA1 ec1a48054a96fea60405896ff0ebf31c2b7ecb12
SHA512 6b9969c378f2223999d2320a6d49fbaa6a7c4c20e14850b776387f3dde7cbd17e6afed0f95d0225d8e66c5f059ba47edc554b486e2e8df24d2be7e46bc0e19b2
SSDEEP 192:sxZ3RdWS/fns8oCeIdpHFHW6+WNGYapQw+HHIg5yJ:sxZ3GS/fnsFalHbGTeHw
TLSH
T1DD22B9526E38A97B8CCBE20DBA55BF53E6F9503251915E48AAFC861C04E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5c8dd0ae-baa3-46aa-a438-828a3117da2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c8dd0ae-baa3-46aa-a438-828a3117da2b.tmp
Size 9KB
SHA256 e153fe7ba4854d028b46896ea7e029293618bceabdbe7c6ba7bd3576a3bf08f1
MD5 f42e199798af6a8321c460d4bc9e3915
SHA1 b8e275e09658b321783c19fb56b18c266ec94bca
SHA512 4e08c1c9d4577f53708345918185b3e119d3a9aad24f9a00556089d407d8b4c11c18ea31aef31c7256b576b60e582ca569c2722d44a34d634cf70e9776254f66
SSDEEP 192:sxZ3RdWS/fnsvoCeIdpdFHW6+WNGYapYw+HHIgrJ:sxZ3GS/fnsgaHHbGPeH9
TLSH
T1ED22B7526E38A97B8CCBE20DBA19BF53D6F9503251945E48EAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

797eedb5-9abf-4fcc-b11a-c0f06139fbdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\797eedb5-9abf-4fcc-b11a-c0f06139fbdc.tmp
Size 27KB
SHA256 1db50891a8aa0492b044b53d59bedab9971471cf0b02fbaf57ba1198c980992c
MD5 97c99d8f28e8228dc2bc375fb2931648
SHA1 e90dfbb1d6491fd4d27fb71eddc67241766b20e3
SHA512 5254456079047f89c41b2822a0a6649e859baf084f228aaeb427e0a9e7385e7d5223c4b273714ff1998513aa2218234f10afecbbd6437a8c804207db34fa1ff2
SSDEEP 768:4YWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7vro4afeS5mRu:4YWPcLKWvKeEeu1jaClLiF784aWS5mRu
TLSH
T112C2EA3B640CCB7E5FC01A9DDC5A6FA77E9802C79A648D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8acc0877-6657-43e6-9343-6721a683d77d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8acc0877-6657-43e6-9343-6721a683d77d.tmp
Size 9KB
SHA256 9607e268a9b7f8a2e13a90c511b0308136696e301d1c42c2e77968dd565d0cb5
MD5 ffa8c2fff6c11cfc60f61aa2799548d5
SHA1 e30276216029ab6ad36a34bfd16c81f94bb60f0a
SHA512 17457beb546e09947324573a4f6bed4d8cb20df3eaef2ca93553143d580b97b467e06322af579e0906b7ecc15cd786a864038a4fb72679e1215981d5ef517c5a
SSDEEP 192:sxZ3RdWS/fnsNoCeIdpdFHW6+WNGYapYw+HHIg5AJ:sxZ3GS/fnsSaHHbGPeHy
TLSH
T12A22B7526E38B97B8CCBE20DBB55BF53D6F9503251945E48AAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98831068-ad65-4935-b3ce-b0188f9bbd2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98831068-ad65-4935-b3ce-b0188f9bbd2d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6842665341931df12f5246ec3ebef160b6081bd882cc9608da6851008a7e2a53
MD5 0a52c4d0ad7aa7721d5091d834a2e660
SHA1 b287054ecc7e3d151699ee19cea5caf5302e1952
SHA512 6d876397780cc2a295602b44dccda6af73a43c94544cc836ea1aa46e3bf5df425e6a94056452a99021b9b93622fd759ab4889d916d9206e6917ba1bf42c6b4d7
TLSH
T10151E6829CB040D8FBC941F181FDD08F36F74C8149832E92F85BCAB85636760924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 39af13bdacb7f35047a7c130f1a260221c787889d8cc10f479e4f3a4949d45d8
MD5 da1ef229f73fa38e7598dd511d99aa9d
SHA1 ea96192c8cd2ea04ce0ff7b46948302b97aba372
SHA512 a00996fd9e8b04812c2e7aad84b701014f9c161c7edfc66451e1e7e594496b05674a3cdb0e83f9c525d31f60cc2c03830c6a227c93f004924ba8790603998097
TLSH
T17C510882DDB040D8FBC940F081FDD08F36F74D8149832E92FC6BCAB86A36764924A05C
MD5 SHA1 SHA512 TLSH

Submit Download

2aa9e690-4684-4eed-ad9a-72e5c225522e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2aa9e690-4684-4eed-ad9a-72e5c225522e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

30a1c648-111e-4da5-b8a0-cd714be0fc12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\30a1c648-111e-4da5-b8a0-cd714be0fc12.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

37095602-ac54-40d3-9e1d-361fd4f82d53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37095602-ac54-40d3-9e1d-361fd4f82d53.tmp
Size 733B
SHA256 5e3b293ed2e935ca789ce246877041c43d00926ac57f6afa56022cbe9609aad1
MD5 4e26dc32f4aae368dd8b3953560d9e56
SHA1 d52ac52843e4e5ac83be3d8059b3e0d47ef6f17e
SHA512 c5cf04e477f807f1576d04801c65fb93c74fa882a60176d0277fec129e87369059ffe0e23aa00435672bc330c2774f5f05483b45c86a73face0f9108f1f96628
TLSH
T1A20190F3C3D599BE890056F056149F17CE2C0506431C7D5AC5D4AE2B97E3475E10149F
MD5 SHA1 SHA512 TLSH

Submit Download

ef545033-2138-495c-a6be-1b31548bd302.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ef545033-2138-495c-a6be-1b31548bd302.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 08b8667197373256d49aa659fd55df282785e03779548853171477507f43f54f
MD5 b651e37b4b57cbbeb6a2ebcd63915568
SHA1 8958cb62209a76fc936a54a4973de6d687411e0e
SHA512 9c6510c94202d180e6a8ba9709a8a0005f8b39e133b9cb067fa8f0d21cdd8b47a99d9f40ef07cbc46c1cf9d0caf20941cd9fd071504b0c61d03f874a481781b6
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yL5IVpz3Lkb10JF3jXYbLuLISdYK991H:KU0wKBeiiZCoKP626qoKHqe
TLSH
T1A8A1E005357B02813CBE298985B58B1B524235F33028E62BBFBD54D29D6FE055EFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62cdd500-10ac-4aab-b466-0f855030b1cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\62cdd500-10ac-4aab-b466-0f855030b1cf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca30df97-8540-43d3-bc23-9f5b8d1ab03a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca30df97-8540-43d3-bc23-9f5b8d1ab03a.tmp
Size 8KB
SHA256 2eabf92d8368ebff3071e3f00ed3c19989000a056c80945e5d3c4d581f843473
MD5 926eddb48e0a3ad24d34d94877b7b822
SHA1 39ea3b9f8cf6ab20f1b2530b5d3cc20a64b95d01
SHA512 cbd95a91d31dc09638a33d93fbb7f8b97b9f88d7acee531c55fae835af32eec6403e793f1c4e9495cd57ff16ca95e35908ef33a66ee65e66f2dff5d45d68f832
SSDEEP 96:3qONk2Qsjpfe/tyng7X5ih/cIPURHl8h4otop5tYD9NBnP9ZvEI0IG2jbb0DqssY:aONe6IE7QmiUyQ9TPuIGmQ2mdC7sz1U6
TLSH
T18E02E939ACB87CA7DEB3AD48F4872B235EA5112BA5956F84D9D81B1D00DB25C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0848fe7-8f8b-4aa9-9593-2486d79c27ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d0848fe7-8f8b-4aa9-9593-2486d79c27ab.tmp
Size 18KB
SHA256 9ce6b4d3d2e7e54a97bfbd41dbffc44661a81381d386c77524d7bd6a88d17356
MD5 c0d7e54620ef1bee01974e265e5768c4
SHA1 73ac2943019a3d36457551a43d08126b5cb71c56
SHA512 64824a7827dc56e41e4ced661977fee312a3825f71655a69f216f519a2f433cb4cd82375d60fb93d7f0b1973b5df4e478ec59138ceb364d49288f19ef4f499ac
SSDEEP 384:DZcIhsNgUW01Hemp4zIGmQ2msMoiwtgOIwZOyFL3od:bhMEmpKT2x1iwXsODW
TLSH
T105829E729C78ACB79DEBA544F5473B134EB4D127E2C9AB90D4DD971C00EB298130BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dadde744-adb9-40cf-af87-ce0edaae4a23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dadde744-adb9-40cf-af87-ce0edaae4a23.tmp
Size 18KB
SHA256 bee9e575249ac9920c02581cc98012be3c36bfa607e624de07ad8c3b1b6d6f07
MD5 4457cb55beca3ac5673b2595ccfa8d25
SHA1 b6865b277b4ccbe31b7ab7b2b46fb6ca530b9780
SHA512 0abdab680f2469dc1e35dc02fbb78aae857b6fa918cc3ea7f6d7f39033f615284686f7f1c00139d65450104c08bb4a6f15ef4b06c260c8c005bf36bd626743e3
SSDEEP 384:DZcIhsNgUD01Hemp4zIGmQ2msMoiwtgOIwZOyFL3od:bh1EmpKT2x1iwXsODW
TLSH
T146829F329C78ACB75DEBA544F5473B134E78D127E2C9AB90D4DD571C00EB298130BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

535ba225-b2a0-41f0-b913-29c0e6f4f6aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\535ba225-b2a0-41f0-b913-29c0e6f4f6aa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04798b024fca1eef6f91c85e4c6945a81ebc6b75d97a3bc1599504e48f825b30
MD5 9b6d0e18394b8391cfe659d9b7e2747f
SHA1 232b2150d22eb2570962cacbd4034f01542d81bd
SHA512 9bb681a60d5af962e9a2666eeb9d5fe2dd29128a0628f4c5c8bd56b0ce5a3d1ecb977fb626dc8cdd49cd5e90180c1c3e42879d9f3c14c6892123a696745ff080
TLSH
T1FC415B58A6F91148B3B37E1AABF2A86E483F79372F0AD45D00110E4F0B63A45CC61737
MD5 SHA1 SHA512 TLSH

Submit Download