5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-v9slmk.htm
Size 194B
Sample261002-sr5rmatdle
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4528	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{1D10377A-8F1C-4621-A592-258D3806A9DA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3668 wrote to memory of 4688	3668	msedge.exe	88
PID 3668 wrote to memory of 4528	3668	msedge.exe	89
PID 3668 wrote to memory of 744	3668	msedge.exe	90
PID 3668 wrote to memory of 744	3668	msedge.exe	90
PID 3668 wrote to memory of 744	3668	msedge.exe	90
PID 3668 wrote to memory of 3680	3668	msedge.exe	91
PID 3668 wrote to memory of 3680	3668	msedge.exe	91
PID 3668 wrote to memory of 2696	3668	msedge.exe	92
PID 3668 wrote to memory of 2696	3668	msedge.exe	92
PID 3668 wrote to memory of 2696	3668	msedge.exe	92
PID 3668 wrote to memory of 4964	3668	msedge.exe	93
PID 3668 wrote to memory of 4964	3668	msedge.exe	93
PID 3668 wrote to memory of 4964	3668	msedge.exe	93
PID 3668 wrote to memory of 4192	3668	msedge.exe	95
PID 3668 wrote to memory of 2276	3668	msedge.exe	96
PID 3668 wrote to memory of 4192	3668	msedge.exe	95
PID 3668 wrote to memory of 4192	3668	msedge.exe	95
PID 3668 wrote to memory of 2276	3668	msedge.exe	96
PID 3668 wrote to memory of 2276	3668	msedge.exe	96
PID 3668 wrote to memory of 3808	3668	msedge.exe	101
PID 3668 wrote to memory of 3808	3668	msedge.exe	101
PID 3668 wrote to memory of 2516	3668	msedge.exe	102
PID 3668 wrote to memory of 2516	3668	msedge.exe	102
PID 3668 wrote to memory of 4232	3668	msedge.exe	104
PID 3668 wrote to memory of 1524	3668	msedge.exe	117
PID 3668 wrote to memory of 2524	3668	msedge.exe	118
PID 3668 wrote to memory of 1644	3668	msedge.exe	119
PID 3668 wrote to memory of 2716	3668	msedge.exe	122
PID 3668 wrote to memory of 2716	3668	msedge.exe	122
PID 3668 wrote to memory of 3920	3668	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-v9slmk.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff872abc188,0x7ff872abc194,0x7ff872abc1a0
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,1999544993188252754,13593496284130682549,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1904,i,17655199793420987480,7581292579001738840,262144 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,17783606237588953027,2978490096489466455,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,14868940805488500308,13383678470371221341,2097152 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1317869410570400072,9702690586017928799,2097152 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,528930543641542284,15512849368024166920,2097152 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,11037984511475381227,329220966284478009,2097152 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:2
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,15655730432605662922,8310628549028039679,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,13208054216156502735,16680511209983623765,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1715920844237141702,17201838192949309887,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1715920844237141702,17201838192949309887,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,3414916593786664350,513636562081360607,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,17243888247746166961,8328100269135445757,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,1470233392493589911,5893770546448638214,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12294600891285905437,13352371082462319428,524288 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=1020 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5816,i,14285929766390932509,12299564252943859748,262144 --field-trial-handle=2280,i,1956904362261347300,5377718374170158922,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

10e8020d-20fa-4150-97a5-fbf326a6d626.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\10e8020d-20fa-4150-97a5-fbf326a6d626.tmp
Size 8KB
SHA256 b5b63c853640c40da61a7733bfe8d60dad34becdc5051f51444c8fee6cf4e094
MD5 855a900fa5404f73aa53b4ca691a1a9f
SHA1 cf3876fd59dc0b7a5cb61ee65ddf91457bf01d89
SHA512 d624b67f9f66554e2cf2ebdd1912b015913f61f22a2fc2443982372cbaae52799dec51e61bcab6767d1dd8a6436803617cfeaafb48df1ce5cf4e45f82e25ccdc
SSDEEP 192:BONN6JUm0QmiUyb5so//jjzorB6ywxWjBCpaU6:BONN6+mEKso//z8ExH4U6
TLSH
T16802C739B8297CBB9AF3AE45B48737139FA4107BA6951F40DAE81E2D01D725C2306D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e8f3a15-054f-477c-872d-e7b8a8bc68ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2e8f3a15-054f-477c-872d-e7b8a8bc68ff.tmp
Size 18KB
SHA256 521e7fee491fb07a8bfc73dc2f9c7865f1250ff92000c1c660894c88670ab832
MD5 e2f09e6193e39e8a75b3239d560b5dde
SHA1 c64b4d88265d73ad5eb3caf6cd5dcff1f604fea2
SHA512 b20bd2ebcc4cc887516ebdcb72f70d661e9e30186d0db003660994e2540a1d9efae5f2cb747c15a4ca921ec67e6b110da63a1bab55f0ae3220fe19277f81a415
SSDEEP 384:NZcIhsNKgUXSbgYgh//z8ExUXQVo6tgOIwZOyrosoJ:VhNw8/D8QVtXsVsa
TLSH
T1CF826C35AC79AC7B69E7A145B18733139FB48027E7C49F54DAED9B2C01DA1E80307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

423d076c-ca5e-43ac-92be-8cd5c1b2cd0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\423d076c-ca5e-43ac-92be-8cd5c1b2cd0d.tmp
Size 8KB
SHA256 c61c7301591206d8781225c8f968b9561eae90a6f05c98d9df9c62fec0c642ec
MD5 ba39bcfd38badb1ac5ffb5f3d7bbb3e2
SHA1 39f7260ae33db741e7fab2240ef5df9238f33b7c
SHA512 a2bca15681b6fd3bf0577bd1b04255a8212eb8dd7bbf84e615f3059556281e42d6febac75377e0c75caa338bff786ba8783b93e37e4ecc22864131d0b1841835
SSDEEP 192:BONz6JUcQmiUy25Ao//jjzorB6ywxW5XQfNxeqM6U6:BONz6+sLAo//z8ExUXQDo6U6
TLSH
T118120A35B878BC6B5EE3A595B08733139EA0413BEB856F90D6EC2F2C01DB15C530AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

16e7895d-8694-4bb4-91e7-15e302783d9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16e7895d-8694-4bb4-91e7-15e302783d9f.tmp
Size 10KB
SHA256 8fa7fc3756e6fa79b1fedcedf75f36a48d0846a3f2451e42cfed81766da5936c
MD5 be5dc57df64482a775d116720a08db6e
SHA1 2f5536a289b4ac24e7d64977f7fa01982f120110
SHA512 b09339f5036a1cbabfb442e4995bf45afedf5601cdf67680f9605794804f8776a5845e9e05ef18a2bc29bd9a9c457f535a539d236fad7ff2e921c0c635b46b8b
SSDEEP 192:sxZERHWf/fBs60WIdpdmHW6+WNGY36ZroIg5JJ:sxZEEf/fBs3XUHbGXiN
TLSH
T1A522B9516E28797B8CCBE20EBA157F53E6F9503291951E58AAFCC61C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1979d19a-ba13-4e8d-b96f-22d608a08039.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1979d19a-ba13-4e8d-b96f-22d608a08039.tmp
Size 9KB
SHA256 393370944d7f04ad6b0ec67cf56de963e79cbdec93ad8652648ccd067b37b432
MD5 97ac1467049ba403e90f69326b45573c
SHA1 d05720c444b8dbe4cde53af7cf25bbb9bd5a479d
SHA512 55208609490cc2cf45776a54290f3f1624f7a0b4f118516716381cf976c03d823afa0c66e4a2fa408ede7010601a2320a6cacccf4e7e2414c850a392b6b9cca9
SSDEEP 192:sxZERHWf/fBsVWIdpdmHW6+WNGY36aroIgrJ:sxZEEf/fBsVXUHbGXL9
TLSH
T14812A8516E28757B4CCBD20EBA25BF53E6F9503291D41E58AAFC861C05E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d7cdc71-6044-4858-99ef-7f2d3a53509c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d7cdc71-6044-4858-99ef-7f2d3a53509c.tmp
Size 10KB
SHA256 96c3ca2e2c4d56ea5a262f5619a73dae2352717a86d25e716f8ffdf6542f6a92
MD5 b825b444b52616a57f730ca92df538a6
SHA1 b77afa86e2b6d886b54ccf14eeac2a550476dcf4
SHA512 1fd6e7c26b9a1db11013e1a012bb205ba5c4e7b8087b94fd0d6e996b6e2e76702223a26598fb8582e5d869cbd3544736a913a924bb9082214bc3b23919958dff
SSDEEP 192:sxZERHWf/fBs60WIdpHmHW6+WNGY363roIg5JJ:sxZEEf/fBs3XGHbGXIN
TLSH
T13622B8526E28797B8CCBE20EBA15BF53E6F9503291901E58AAFCC61C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2db96ddd-8b80-44a2-be21-3c046c1b9c53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2db96ddd-8b80-44a2-be21-3c046c1b9c53.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62094d1b-4cd2-4ec4-af8d-1206f617eb3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62094d1b-4cd2-4ec4-af8d-1206f617eb3c.tmp
Size 9KB
SHA256 4946645d0ffb7cc44b53436558586a8dc25ac7cc291d133fba870ded064294dc
MD5 dfac032d3157dc194055a158fdaaf501
SHA1 68beec4b21ff93cc6305b865853d370244ea53da
SHA512 532cb39a0142c9438629151de9a01139bda3280f1e39d2653f3edcbccc51a9496485e9564a9caba5397eb823efe71981783504ed6d9457cc98b676ef7cd82768
SSDEEP 192:sxZERHWf/fBs6gWIdpdmHW6+WNGY36aroIg5rJ:sxZEEf/fBs3XUHbGXLL
TLSH
T1E222B7526E38757B8CCBD20ABA25BF53E6F9503291D41E58AAFC861C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 af5b4f9efe791fd6fe3154ad2ee8595df08bec9644f960af95cbdc3018074815
MD5 979c610521d0bb92ef8dd0c6f538012e
SHA1 1d4eba53c8bbfcd88da091af1ebda3b53595b7e2
SHA512 652b7d5824728746ef20c66a20b63e47f11aac4fcf2c5a37648cc5d618b0ef01acad414c38b8900919884b9ba5eeec42db829327f43588ce7d1ac1238011e7bb
TLSH
T10A618F90BFD078A1FBA87FB9DFD704833AB3A7C01AA7ED40A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1eeb7efadfa1ef8431f9732d60c2f6c63a7b56ae05f44063d7c1fc605fe9da8b
MD5 7bc0368901f2622adf54b1a93f40fb1a
SHA1 2c0b2532ad0ba620844eebef71613963db048a67
SHA512 290743c9dc9185cc2d6eb392c10a4e8727f184c282016d6e02f734637ff400082a3184fa970e1929cbd59644a905a5002d3c9621c53ba91092eeb1ab25fbf125
TLSH
T19B618090BFC078A1FBA87FB9DFD7148336B3A7C01AA7ED41A080D8F95E067909060354
MD5 SHA1 SHA512 TLSH

Submit Download

39009a24-9042-483e-8f71-64029457609e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\39009a24-9042-483e-8f71-64029457609e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

003b59c0-3878-4be1-b090-6bb7d539eaf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\003b59c0-3878-4be1-b090-6bb7d539eaf7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a5837245-2285-4bcc-be94-401b77c40d03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a5837245-2285-4bcc-be94-401b77c40d03.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

bd9143e2-242f-4325-9fe4-fbbff0000f3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd9143e2-242f-4325-9fe4-fbbff0000f3e.tmp
Size 949B
SHA256 a7530d60cfbf72c9113068b7e0fca25d01ea8b78435f2d0aeb7a9d5cef864a18
MD5 aeeb4d11370d94aa4f42b8b7a3eac206
SHA1 34ae6a5be12134797bdfa841f1035d07f06b3dae
SHA512 b48dfa87cd919ec6c03a5b4963f412a3a4f895b935d3b6871eedf1562dcd28162405fe26ddbde7377d95e3e52bf2ed665a3cf3f79aaf9306ef7ab0d00bf38647
TLSH
T17D117DF3C3D5C5AE894156F05A24AE2BCE1D0506421C7C1985D4EF6797E3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

d1dc7521-7d6e-41c3-ae05-0679cc490664.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1dc7521-7d6e-41c3-ae05-0679cc490664.tmp
Size 27KB
SHA256 d3546616a96271eb834db757dd1aec2d0a195fcff45e457240602cf12ada8937
MD5 ec9346f00dd381649aff0fb79db2494c
SHA1 c055f1985872c29fe532791ab4d895c71a5470bb
SHA512 9aaf3ff411495f47853d16f5622cdfac0284666eadbc5c76637cd24ff9422cd685ea0992e478282e49dc36ffaf0f3418c38d595bea1e6985af19700499db6c41
SSDEEP 768:f7Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Wro+P:f7Klm7QWvUYe0u1ja8/L/E/t+P
TLSH
T13BC2EA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76fea061-b781-44e1-bcd7-431c2032f9b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\76fea061-b781-44e1-bcd7-431c2032f9b0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b59ef500-b4da-4a05-a62c-8a4045b9432a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b59ef500-b4da-4a05-a62c-8a4045b9432a.tmp
Size 18KB
SHA256 5b5e8b38b2bca14ce3cbf8efdafce40f2fb48e1d8bc0e6d21b3e01b3879a66c2
MD5 4f2e059145a3a4c5136efedbb55bda92
SHA1 0c840f60e78a6ed9a5df81bb8d4a5314afa5f1b3
SHA512 a26f76b96b7c6569e33634b00e68851198df6cbb89dc34cf3871f664744eeae913e6d8e821dac2b04e3f0535aafc0457b162bb156652db31d52e01c290c8a8a4
SSDEEP 384:dZcIhsNK5UXSbgYgh//z8ExUXQVo6tgOIwZOyrosoJ:Fh8w8/D8QVtXsVsa
TLSH
T100826D36AC79AC7B69E79145B18733139FB48037E7C49B54DAED9B2C01DA1E80307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eee33d76-d8ec-48cd-bb02-385c70852c85.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eee33d76-d8ec-48cd-bb02-385c70852c85.tmp
Size 21KB
SHA256 f4f7de5b990f65fcf6753e8437307026a318e9f29c2dbf78c79938a3bab4d0d7
MD5 b86a6ff54f11504471bfe3e4b5072fa7
SHA1 9a87c48b8a83b8cb856cc4ef2e83bf47891ce1bf
SHA512 aa0cf4b765d5c4a020bb34fa65a7cc18d0647bd35432c12d3fbe00421e0a1ca7cc7f5e8b604b33fcfcdeb289bf69729f7f02ef38066991ef56252f657561b626
SSDEEP 384:aiFiZcI7zsNS8TUNTUlIlgUXSbgYgh//z8ExUXQno6tgOIwZOyrosoJ:RFQvHwglw8/D8QntXsVsa
TLSH
T19CA25B339CA89C7B6DFB9A85F58A33038EB44077D695DA91E6DD9B2C01DB1D80307D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36c163c5-0e9e-4e87-a100-ee88c61f3a8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\36c163c5-0e9e-4e87-a100-ee88c61f3a8f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 023728f754eba97d8bb77383b69c565733c234547923e2ee172cdcb2143fcf61
MD5 f285ddbce8280f8e28834956710c967e
SHA1 d3638558e7b8751406c1deb5e927a2c28ba6855f
SHA512 9bd8cf8d199627c1be574591bef770fc8a66222e811b59f68747343632bbfa1102a551970c31fd0c3df9f2090bfadca0e6dc78412af1c61bbb944b93ea5b3635
TLSH
T1C0411458A6EA2144B3B37F5A9FF6A96E447BBD772E07D09E10110E4E0623A40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download