368419034908240ca90fcdd74714ff1a1d0a89bccc76c76e485470637de3d5ff

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 7KB
Sample261002-s78s8avelf
SHA256 368419034908240ca90fcdd74714ff1a1d0a89bccc76c76e485470637de3d5ff
MD5 a95f14c35fd6be8f05661bcc26615d35
SHA1 2e1b3f727dbf6da94a0776572dbb23668dc1e2b8
SHA512 0ee724c8ec8739ed68f1ac977816058d401611db10f2ecb62280ee1b4d50dc5e24eb7adf8d300d18dbd9ddeee3663a90d65271c38a0299c33d0e579f872a7c11
SSDEEP 192:9LgORvRMnwRxenwGMlJuQJuf0fiJncsJubaF:FATHncO
TLSH
T127E1565557C07709853AB0A4E2714FC9FFD3071B57025868B0BE273BAFBA8158A571EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{DDFF056A-0230-40D3-A932-9F8988FD9973}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
692	msedge.exe
692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1240 wrote to memory of 3352	1240	msedge.exe	85
PID 1240 wrote to memory of 4344	1240	msedge.exe	87
PID 1240 wrote to memory of 4164	1240	msedge.exe	88
PID 1240 wrote to memory of 4164	1240	msedge.exe	88
PID 1240 wrote to memory of 4164	1240	msedge.exe	88
PID 1240 wrote to memory of 2964	1240	msedge.exe	89
PID 1240 wrote to memory of 2964	1240	msedge.exe	89
PID 1240 wrote to memory of 2688	1240	msedge.exe	90
PID 1240 wrote to memory of 2688	1240	msedge.exe	90
PID 1240 wrote to memory of 3392	1240	msedge.exe	91
PID 1240 wrote to memory of 2688	1240	msedge.exe	90
PID 1240 wrote to memory of 3392	1240	msedge.exe	91
PID 1240 wrote to memory of 3392	1240	msedge.exe	91
PID 1240 wrote to memory of 3584	1240	msedge.exe	92
PID 1240 wrote to memory of 3584	1240	msedge.exe	92
PID 1240 wrote to memory of 3584	1240	msedge.exe	92
PID 1240 wrote to memory of 436	1240	msedge.exe	93
PID 1240 wrote to memory of 436	1240	msedge.exe	93
PID 1240 wrote to memory of 436	1240	msedge.exe	93
PID 1240 wrote to memory of 4176	1240	msedge.exe	98
PID 1240 wrote to memory of 3096	1240	msedge.exe	99
PID 1240 wrote to memory of 4176	1240	msedge.exe	98
PID 1240 wrote to memory of 3096	1240	msedge.exe	99
PID 1240 wrote to memory of 2020	1240	msedge.exe	104
PID 1240 wrote to memory of 2224	1240	msedge.exe	120
PID 1240 wrote to memory of 4840	1240	msedge.exe	121
PID 1240 wrote to memory of 3404	1240	msedge.exe	122
PID 1240 wrote to memory of 3040	1240	msedge.exe	124
PID 1240 wrote to memory of 3040	1240	msedge.exe	124
PID 1240 wrote to memory of 1120	1240	msedge.exe	126
PID 1240 wrote to memory of 1120	1240	msedge.exe	126
PID 1240 wrote to memory of 692	1240	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff82394c188,0x7ff82394c194,0x7ff82394c1a0
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,600738491618284852,15546065038945063979,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,2810356375964466603,12069675455780026666,262144 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,4364193787226631590,14496730205628522531,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,2247749924302644831,5900371915441164345,2097152 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3384,i,4109212331057548652,5871598084905592418,2097152 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,10670543154266935566,11514486087403415640,2097152 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,12020983052850919320,3450245779002001015,2097152 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,5453343538963378500,11041539113284456598,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,761352325464205519,11161432020173874342,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,10228502141887919211,16773001643162071706,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,10228502141887919211,16773001643162071706,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,13205855978761626454,8335079725808416657,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,6269754860818072860,1960708568897064778,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,17605944364213677432,16892031832820302406,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2808,i,309885721499806897,2850417447607138219,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,765053963425309839,11808202710033877274,524288 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1224,i,7589376233996928581,17573071006393850816,262144 --field-trial-handle=2352,i,1954839547874938862,2756371081421457229,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13db398f-d45c-4d21-a2dc-d3a20c7e304f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13db398f-d45c-4d21-a2dc-d3a20c7e304f.tmp
Size 18KB
SHA256 b8ecff7a5db241feb58b74d7a6d09f79c76a43a846e5ee69fad4e2b7b2066758
MD5 fccd3fb89e2153023bf3ea78421c9fa6
SHA1 88a9e6a537ff9987b644c66a90efab83f0e6ad50
SHA512 b03c561f00eb87765f79bbe63200a507866c263d5bd2d160f00410ab9936c85e1e9ce8d0f926b2a353bdb64508b20390fff9974f6837cef2474eaf583cc05f8b
SSDEEP 384:shZcIhsNmsiabDdBh//at67TgtgOIwZOyxLpoi:2hmv//gXsq1h
TLSH
T1B2827C316C78AC7A5CEBA086F08772039F7444B7E3C59F84D9EDAB2D01DA1980307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1579f763-11e9-4013-864b-a74028731fb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1579f763-11e9-4013-864b-a74028731fb1.tmp
Size 8KB
SHA256 7acde3f171e913b99da692e2ca58d5aeed6fc61a2e5a8244e9fb2c44dd82e113
MD5 1e3122ab947ffe7d4d68f369b0d96bbf
SHA1 b15d1d89e6b52d39d9adfd577ab5787d21597df8
SHA512 0b6f6f3d02056fc8572dd86dbf9e4f014389d9bfa3b03e13b83dd537cdbb933fc3007b4689fd5fa70c6956dc3031e855464ca4b9c475f8834ee323a7cb5859a1
SSDEEP 192:BON/6JU0QmiUynNzo//OywtvC7OezfaNxSqQU6:BON/6+Eezo//at67+gU6
TLSH
T10812F935B868BC7B5DE3A595F04736239E640177EB896F84D6DC2B2C02EB1AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61e0d9de-22e8-4e6c-a1a4-b46fee81583d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\61e0d9de-22e8-4e6c-a1a4-b46fee81583d.tmp
Size 21KB
SHA256 eef21d3a9f29081ecc7edba8399029ca7c0489e031758af4956dbb629b6b60e1
MD5 3a3fe794de40cc3195d3c9af1ab4e802
SHA1 0e99a20bce7929b9870d5e2fc5bb1801d96158d7
SHA512 b03bd7c149245d2dcd274205319c530d7bc1230d646be6c7604807eed74176168df28357f475f4c67ed38f53938f9502cb1432d929ff562914a228a11dab5ae3
SSDEEP 384:UQZiFiZcIkzsNm8TUNTUlIlsiabDdBh//at67PgtgOIwZOyxLpoi:eFQYrwgav/7gXsq1h
TLSH
T10FA26B335CA8EC7FADFB9A85F44632039FB440B7D6C5AE94E6DD9A2D01DA098030BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87f8b555-c6c4-43bf-bde7-4559dff479e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87f8b555-c6c4-43bf-bde7-4559dff479e4.tmp
Size 8KB
SHA256 b8aed3a7f4527c9652a2b1a142f82e2ba86701c9757d6c81d5a71bbf00fe2639
MD5 ddced22a310606cf0cfd7576ee74b9e7
SHA1 9b09c5b0bfcfa907b2d3ac0febfa793430aaad43
SHA512 61b5257d33d9483b419e1ceb5a781303da9accb924d4032fac2fc99c13a960e34adba2385eb99dd85552cbb290e1d078aaf9d6848d117b810bedfbd741eedbe0
SSDEEP 192:BONO6JUm0QmiUyYNso//OywtvCxBC62U6:BONO6+mEhso//at6WVU6
TLSH
T18402C839BC287C7B8EE3AD45B44777239FA4107B95911F84DAD91E1C01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9af22b90-d592-45c7-aef3-69a7a787740f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9af22b90-d592-45c7-aef3-69a7a787740f.tmp
Size 18KB
SHA256 d8291e285cf1d65c383aea9ab984dffd196a7088dd58e1f08f260f11263ee706
MD5 29da09ff400f524ad5803fc77b0c3784
SHA1 b78e64fe5d2ab4db01328a0b97245010e462945f
SHA512 b45ce035b7902c50fc79d8e607bcfa1c34192f370eaf3cd2f7c60fb1714825acc7dbf0137ae6da563d32fbf33d65285a1322f80cc7a63bc1456585b6bdad3b80
SSDEEP 384:BZcIhsNmFiabDdBh//at67TgtgOIwZOyxLpoi:JhJv//gXsq1h
TLSH
T16A827C326C78AC7A5CEB9146F08776039F7444B7E7C59F84D9EDAB2D01D91980307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

76688b4a-e43c-4a61-9472-e92dc11280ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76688b4a-e43c-4a61-9472-e92dc11280ab.tmp
Size 10KB
SHA256 235e17adf9e027404a24e4f61ec9406cdcf1a29cc219fb3cc0526934efb75e28
MD5 6a90272044cf170633e54ed889d54d4c
SHA1 0bf714d9da2c0f7733fbba5e782ed8343b8ffec2
SHA512 84d659158e96ffe3568d0b861be6047b5395a0dd3712eef91c8ae466a202fec5bdb6ac5e205d7045db46473818e304315d6e18ab854d23ea37ddcfd3690a07e8
SSDEEP 192:sxZmxR0We/fbsKDIdpdAHW6+WNGY36p/kIg5lJ:sxZmxde/fbsKcCHbGXu5
TLSH
T10422B8526E28697B8CCBE21DBB25BF13E6F9503251951E58A6FCC62C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76a880a8-67ea-44db-84f1-d7e73c74c837.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76a880a8-67ea-44db-84f1-d7e73c74c837.tmp
Size 10KB
SHA256 ee1ff325aa99374782b0b9fb2f4450ca64f54165a63f2c514c0bde16f3ed9912
MD5 ffc9add8dfc8807f818d8c2c027914c0
SHA1 53c350aa94026dbfbb9dbdc0a13dc1a24d3bb496
SHA512 475ddf0b98c430fd7ddd4930b487c81145fd1b1cd3a8ee8b2160f56b3e6f51ff72faf49fc2af24c6594dcf37c32dd7f695f448d766035a222d181c64f168fbe9
SSDEEP 192:sxZmxR0We/fbsKDIdpHAHW6+WNGY36b/kIg5lJ:sxZmxde/fbsKcgHbGXU5
TLSH
T19D22B8526E28697B8CCBE21DBB25BF13E6F9503251951E48A6FCC62C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a01687d33e96ebb211f3b18b3cbc55e22ae3327212cd7a64b2eed3bc5b3ee7b9
MD5 9455e12837fc2683ab13890b5e1d34c9
SHA1 c0fd06b86def1d41d53c677eba4a41bb6767c7ca
SHA512 c736e91e2e573617867a9f61f1f47bc72e16a321136ac1babf2e5973412c650359fb96c213abcf4fc47c7fe14a66075fe1eb71b12e9c4785f532055b00cd36ad
TLSH
T15AE026F848CAC22EE25CA89F026C570CD3C0B61B92C0AA8E2B0CCAC47405080E3837A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b478811de30ff8fb907670fdb4157c0854cb377899de804f9bd5a6a042cac364
MD5 60ba8fec134e5b44746c4d5216f12e6f
SHA1 8365726ace24137d2ea2e4cd23b5396284036f4d
SHA512 651c3c90f6110df2eb6b6d39642993cbab4320462b85d485c80f49d0e464c838fc3b0bf769083691ac6b1f49763b3683f6ccfc79aae5f5254bdaf3711ffb6cd7
TLSH
T13551B4829FE303E5FFDA88F28FE428EB373E45C091836E72C198C6B8C9473548090088
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 51b5549f7e15e0d2c86b6923757f3a7bcda4ed255dc39f28f76eb3b81522d256
MD5 d1bbe5f171b23d096393f6e334dfc97a
SHA1 17beda5378301507d62d8e1cc073d945659d912c
SHA512 eb43ec69e63e26a30f316e0f0724b63ce4ceb0de5df85d04c79b5ada616aba9f3e7161aa2dae340dc8dbb46aac1b9b71d44389acd39117bad4890c070f6b8776
TLSH
T15A5183829FE303A5FFDA88F68FE529EB373E45C095836E72C5A8C6B8C9467548095048
MD5 SHA1 SHA512 TLSH

Submit Download

0b3e50e5-ad6d-40f5-9b3f-bb6246c75ad2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0b3e50e5-ad6d-40f5-9b3f-bb6246c75ad2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a50064a6-d889-48a4-ade7-3ca649b35fa9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a50064a6-d889-48a4-ade7-3ca649b35fa9.tmp
Size 949B
SHA256 ea0cf0eb0592f39d491be179b903662d3f6156aa8d512efb96c6477ad41e35ab
MD5 d9e690c5a3746c8079d1a3d28d6cd1c5
SHA1 7bf94bfcec58cf4462f3a2439c86bca956b58f06
SHA512 4b9fbcac7c7fe5d546ac3e48d4f73918f3deb380e0c14c21a76a3f591a508c34e9d8fd6fe9ca20ed3d6cab1cf424c176e92baef7c54eb8985ba59cbbc51fb62f
TLSH
T1BA11BDB3C3D589AE8D0556F05A24EE2BCE1D0606431C7D1985D4EF2B83E3076E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

cdfa9bc4-550e-4ee3-9503-3df851e3eea7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cdfa9bc4-550e-4ee3-9503-3df851e3eea7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f177a607-f57f-43f0-83e9-92a9701d5501.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f177a607-f57f-43f0-83e9-92a9701d5501.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a8a60f52-83c9-4415-b927-724dcee1f142.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8a60f52-83c9-4415-b927-724dcee1f142.tmp
Size 27KB
SHA256 5dd52d98e0010794c3d9fe3bb475e2b50440cce761a2c3fbcb9dc60fd78c0098
MD5 2123db360afbbe5ac569fdfc82ed24bd
SHA1 46f0c7807a1ec4d47d511bf0f0479a5f910eee6a
SHA512 5077e63777c6938e273be0a980eab72c4f48173a65b8a555c91703ef4970a519e6df9975ab3bae5ffa143689e26762c14eb5ae4dfe7dedbd8c88db5cc982ecac
SSDEEP 768:F5Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/eroLi:F5Klm7QWvUYe0u1ja8/L/E/1Li
TLSH
T199C2FB3B640CCB7E4FC04A9DDC5A6F9B6EA802C7A6588D4047FA984C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c32b25d9-35b0-4fdb-8b9b-f6f98f3066bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c32b25d9-35b0-4fdb-8b9b-f6f98f3066bf.tmp
Size 9KB
SHA256 ebe50b8210bd22094c24cf700384357e729fe63d7742040b5663438d29e5d07b
MD5 08b63d2b42b3affe758214c8498736d2
SHA1 09e40a492444e75e3d567d7b819f7bc780cd6a05
SHA512 bd7ecbb55b06e7ef39884caa6abbfc05a365421ad7ddf2aed8c981889a24ed8cd84cb78702925015a8d77b607fcad0ccc5cccd67a9a7c218d90397019eb8c52d
SSDEEP 192:sxZmxR0We/fbsDDIdpdAHW6+WNGY36a/kIg5XJ:sxZmxde/fbsDcCHbGXbH
TLSH
T1A122B8126E38A97B8CCBD21DBB25BF13E6F9503261D51E58E6FC862C05E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec6c57e8-6097-4cef-ba01-63120c16dd4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ec6c57e8-6097-4cef-ba01-63120c16dd4a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0da9255-e4b5-4dd4-ae68-a1d91ccfa437.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0da9255-e4b5-4dd4-ae68-a1d91ccfa437.tmp
Size 9KB
SHA256 5873d31e3fd5159d185da1958691ae3926275cf2e9a3eb140384c258b648bf20
MD5 da0046651a7231a45c7de43e4fb5fea3
SHA1 5fcb23a409b08d53e6b980162f4066bf2c0a5efb
SHA512 6b93114a250d7c6ca953939859d2f020432c7b04a2353ab330599e99e161830eb9011f92fc5a0d424d56bd497e69be637922d16e89620aab8679397d583ffa41
SSDEEP 192:sxZmxR0We/fbsmDIdpdAHW6+WNGY36a/kIgrJ:sxZmxde/fbsmcCHbGXb9
TLSH
T11412B7126E28A97B8CCBD20DBB25BF13E6F9503261D51E58E6FC861C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b171f4a0-8d99-48d4-b986-1b33ae7bb85e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b171f4a0-8d99-48d4-b986-1b33ae7bb85e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9a7b19d-6aa1-4075-b9f7-0556a320070d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e9a7b19d-6aa1-4075-b9f7-0556a320070d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c2c7cd00acaf7b69ef75e34b9307d805002f5188e5abd8eb534c46e7f8fa7659
MD5 415fa684880da4680bdfe0f6a263d2ee
SHA1 108b5a457b0812f8dfc60ff1b9c998993587bc7d
SHA512 45ba9d50fbf2546cc3a519fe45201b2fbe72a0f6527234151dbcc1d3bc34aed1a021bdac9c6b48bddee48889f6b9dbf764f9dba67055e48e20fb3e098b863e73
TLSH
T1A3410759AAE91118F3B33F5A9BF7A46D487B7D772E06D4AD00110E4E4A22644C9B1733
MD5 SHA1 SHA512 TLSH

Submit Download