c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d

Analysis

max time kernel
148s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-d764cy.htm
Size 34KB
Sample261002-ssramateke
SHA256 c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d
MD5 966cbc85dbef6cabdbdc9c7e5496cc81
SHA1 a975b1e21c10dd0dc8fa0dc9ecc3984ca1aaf500
SHA512 4385a6988471168604246748dec63ed3bcfeecaffa1948583072d992edad73d6943a08af0c354e6fcfc007425da662357166b6909fa654e104b78c0e97c38a71
SSDEEP 768:3srOAOH3uia5QeAE4rYyH1UeH+NypaNJiA9Ky:39AOH+l51kYyHeNVJAy
TLSH
T15AF2E65356D19D37066392F5FCB8BD2C95CA8D0FC248AC04743CAA0C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2524	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{48611D90-1FDB-4E33-A624-323BDDC1DDFC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4428 wrote to memory of 4752	4428	msedge.exe	86
PID 4428 wrote to memory of 2524	4428	msedge.exe	87
PID 4428 wrote to memory of 2084	4428	msedge.exe	88
PID 4428 wrote to memory of 2084	4428	msedge.exe	88
PID 4428 wrote to memory of 2084	4428	msedge.exe	88
PID 4428 wrote to memory of 1904	4428	msedge.exe	90
PID 4428 wrote to memory of 1904	4428	msedge.exe	90
PID 4428 wrote to memory of 2292	4428	msedge.exe	91
PID 4428 wrote to memory of 4516	4428	msedge.exe	92
PID 4428 wrote to memory of 2292	4428	msedge.exe	91
PID 4428 wrote to memory of 2292	4428	msedge.exe	91
PID 4428 wrote to memory of 4516	4428	msedge.exe	92
PID 4428 wrote to memory of 4516	4428	msedge.exe	92
PID 4428 wrote to memory of 1756	4428	msedge.exe	93
PID 4428 wrote to memory of 716	4428	msedge.exe	94
PID 4428 wrote to memory of 1756	4428	msedge.exe	93
PID 4428 wrote to memory of 1756	4428	msedge.exe	93
PID 4428 wrote to memory of 716	4428	msedge.exe	94
PID 4428 wrote to memory of 716	4428	msedge.exe	94
PID 4428 wrote to memory of 2356	4428	msedge.exe	102
PID 4428 wrote to memory of 1760	4428	msedge.exe	103
PID 4428 wrote to memory of 2356	4428	msedge.exe	102
PID 4428 wrote to memory of 1760	4428	msedge.exe	103
PID 4428 wrote to memory of 1408	4428	msedge.exe	105
PID 4428 wrote to memory of 3928	4428	msedge.exe	114
PID 4428 wrote to memory of 616	4428	msedge.exe	115
PID 4428 wrote to memory of 1188	4428	msedge.exe	116
PID 4428 wrote to memory of 1116	4428	msedge.exe	126
PID 4428 wrote to memory of 1116	4428	msedge.exe	126
PID 4428 wrote to memory of 3248	4428	msedge.exe	127
PID 4428 wrote to memory of 3248	4428	msedge.exe	127
PID 4428 wrote to memory of 2696	4428	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-d764cy.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff6da5c188,0x7fff6da5c194,0x7fff6da5c1a0
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,12640778753118527474,3175526144293710536,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1462376436195797440,6223965955330399175,262144 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,11473097547744423241,15494882628379995714,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,1597215338146530020,9961460287718310228,2097152 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,7773579800115444345,7619943973673722523,2097152 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,9777092211114484260,3578325110778401983,2097152 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,3929318663506106110,11008779432405172459,2097152 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:2
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,4499597167407908399,14946285828463423632,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,3614456623999649737,6180585889755277240,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16748281629038810744,5755486837112058585,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16748281629038810744,5755486837112058585,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,11190068144518677593,9880208124866839156,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,7628177207766715668,4518424267401224184,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,15813408568885470402,3087062631033580734,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,9851953993348542786,6243118333070382566,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,11729265968015662949,4785850957965153623,524288 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,2335049629068195240,3176418418546125422,262144 --field-trial-handle=2276,i,14478929531305934481,6931876812956747802,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3cd55fed-7014-407b-a505-64b0dde556ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3cd55fed-7014-407b-a505-64b0dde556ea.tmp
Size 18KB
SHA256 31fe131a2fe5c36e5fb9192520bc734645f99d43fa14ddb3e9ae6b670c9b3fa6
MD5 de7fde44ce33ec2d8bc79df4ed9533fc
SHA1 40aae0c1174f18c5f690471edbfb663378ee5b79
SHA512 e796428d5d60f3956af8346883a42733befe99e75fa8245f233ab60f1af6f3d040a1976027776af1c73bff3d4f6c38cbc4b38a98b57a3c6a7934a88e6f77a5ed
SSDEEP 384:dZcIhsNEUiwM/u/efefOjTV+WOiGewjE+2SJtgOIwZOyeo7oJ:FhIzmnzODjElSJXse7+
TLSH
T184827D326C745CB75DFBA145F18A36038FB89067E6C66B90D4DD6F1C01DA6AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

648a906b-2bf3-4c28-b89b-0e176d4b194d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\648a906b-2bf3-4c28-b89b-0e176d4b194d.tmp
Size 8KB
SHA256 2a9cac7847d638d66619df1d7e2a138fc726e44d5807d6ee8712c2f7f92bfea7
MD5 d1b5b09495ef5b0f2cf6b1fe67c66681
SHA1 3c8e098b8265d07fd2ed898bb7de4fab1d4798d5
SHA512 e96ac2d2a2b3081d9b4e6af35b174da42961917abecacadd7bfa95011a2be0a4fdf8bcbcd2cc1dee66e463b9e323195a833e8b86af78be8abcde786c611cfc1c
SSDEEP 192:SONe6yQQmiUy499OCTVg5WOiR0ewjE+213Uyq5U6:SONe6HF9OCTV+WOiGewjE+22JU6
TLSH
T1C8120935B8746C775DE2A646F08732138EE85167DA867B80D5DC2F1C01DF66C230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ced312c-83c1-40f3-b5e8-79272b267e03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ced312c-83c1-40f3-b5e8-79272b267e03.tmp
Size 8KB
SHA256 64d661d11fc95d6f4734ae555b57c227e421b6c2190345ddae879869d736b2e1
MD5 2cac1989a7327077782391c6379bfe3d
SHA1 8d32e6f7edc90e7cdcb1b6e90225c476ba73b068
SHA512 19b9634427c69b95a344e2d5e031a57818b8285b45c721c410ada7c282874dcc8efc10369f5e7a83a25cb5ca9413671f2a6ba561c8dadfd4ba2e7932a50c7c91
SSDEEP 192:SONu6ygpQmiUyx9tOCTVg5WOiR0KzP9AU6:SONu6lHStOCTV+WOiGUaU6
TLSH
T14102D634BC682CB79DB3AE06F58B37139FE8116BDA512B84DAD81E1C01D766C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

886c379c-1050-4bb9-9c1f-54c74366f0ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\886c379c-1050-4bb9-9c1f-54c74366f0ba.tmp
Size 18KB
SHA256 9796695354155cf4abb80c2fbb6fcfe69d89c67e55a1a8e88f96ed70cf9f0cc7
MD5 19699544ce00da2639cf4997402b0b9b
SHA1 62ee40e01f54e75a4c8ef7edd2d516fe1d34a4d1
SHA512 97c842de1d02d5a3cd1eaa5944f4477d3fcb58dd487033fc4179ae03d0958bde9116a67df666abfa0b7766dc9912b214b441cc2426ef934d151a3a48212aff59
SSDEEP 384:yZcIhsNEUNwM/u/efefOjTV+WOiGewjE+2SJtgOIwZOyeo7oJ:AhzzmnzODjElSJXse7+
TLSH
T172827D326C785CB75DFBA245F58A36038FB89067E6C66B90D4DD6F1C01DA6AC130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c26cbbc-1a0d-453a-957b-5edb39558ef9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\0c26cbbc-1a0d-453a-957b-5edb39558ef9.tmp
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
MD5 60b4515826d1c9f4b017a7d286115708
SHA1 91a906bd437f5276b450fa960823a1d8884f5b5c
SHA512 49ec0ba508a1c4d76e366cceb731579d594d5a8727c9089704a8f0f492164a13db6579377d36e91cd39359f1ee2ac85e2aa9a737f1640db34a67d8a1c0d408df
TLSH
T176D080B49D685AE4D0A5307D1335454173DD97529603210D65D10A150D743D31551CE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

2fd5825d-8a1d-4051-99d4-62db4e5af803.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2fd5825d-8a1d-4051-99d4-62db4e5af803.tmp
Size 10KB
SHA256 80f2cc86b07f03b5ab77c10bc6a6397602eeab46a547196ad3737dd8e4b12fe6
MD5 300d67ad58998aeb0eb45b0102e90b27
SHA1 d6a294511b2128aa665184869b22475d26e0da12
SHA512 e6552892bfb500596010ec902f06d2d6cea940ea5aba5a84c66a9bc8e8ee0ea669068824277e410cbb16831a37094a3c6751248f4f46687cbd6c0cb777ccaf2c
SSDEEP 192:sxZvR6WS/fusxPIdpdrHW6+WNGYRPRz+RIg5oJ:sxZvnS/fusxgpHbGm5W2
TLSH
T1FA22C8116E38B97B8CCFD20EBA25BF53D6F9503291951E48AAFC961C05E76CD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dd0fabe-53e3-49c0-8535-311b6d93b7a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4dd0fabe-53e3-49c0-8535-311b6d93b7a3.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

52e3e10d-9745-4f48-a46b-b559b68a3db2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52e3e10d-9745-4f48-a46b-b559b68a3db2.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86b2c3c8-39e7-48e8-9873-549c425dfccf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86b2c3c8-39e7-48e8-9873-549c425dfccf.tmp
Size 9KB
SHA256 14b4e0cd340a69a91838879dbe99a8cff91c08f7220d2c6fe7eac6141bd989db
MD5 c489219b139c2c40f282ff6e49836ad4
SHA1 2466e28e75348c922474ed4ffe504e41fe696c7f
SHA512 996b10eb057a4c125c3949208632b281352f6533e3389255d55cf8a58a085aa20acd04c0d9ee340dc43e8464497af0bd613c15663b92a0bb16f15fa9bd2133da
SSDEEP 192:sxZvR6WS/fus7PIdpdrHW6+WNGYRPRz+RIgrJ:sxZvnS/fus7gpHbGm5W9
TLSH
T1A222B8116E28B97B8CCBE20EBA25BF53D6F9503291951E48AAFC861C05E76DD130781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 969fb72b9689ea764d801b1bd51c39ae43d050d59807ef3a81be40904a8f3a07
MD5 202db6ebf5b94afc91301a64aedcea32
SHA1 243acc386e9daedb8229740bc9c4679839f0fd5f
SHA512 482b99b379e61d5885b34357f5a88cfa9d5f6f169c29a0be9d9b6e79c412dc17611169a37f831541f2582e224a36cc737eb25fec038371e3e38940713e09094b
TLSH
T150E026E904CBC22EB20CA4C703F8B70C93C17A2BDBC0ADAFB700CA897445440A6C26A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 070093e909b91e3a7523ab8d53011417d3f9782bd12e02755bbc068e20f45fd3
MD5 03c38e70b0eaf6ec975a7a397afe634a
SHA1 a8b4af6608d805f6f11622b5be3b965180dd49df
SHA512 ecdc141f52dcab7a41d40b7b4921ac804e2e97ed0cc4ea201f5efcfa86c3ef700e0ea1fe8c585cb4fd324f9f752525c1462aa43bbd3babdc51b38f16cd4f3f1e
TLSH
T194613C8181E2446DFBA5C973D2F91E8B3E35994099932D4222BBFF798C0BF85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d4ead969ef228181c25c60c3501fb9802d639bb41999ad68d55ca6c57713652a
MD5 2bbc98c31f9b73465e6c51e92ceef4dc
SHA1 c74184ba6bb4e9d4d9d17b1ceec5b789cc3aa131
SHA512 e5e0a370b0067b24659347c2d1582d916438d55d70cddda15ca579a54b24b5b2b6a36261eeff1eb0dbd43d3820599d35bcead8110e52a01ab54d6b9fb91f67a4
TLSH
T19A613D8181E2446DF7A5C973D2F91E8B3E35994098932D4221BBFF798C0BF85E16C05C
MD5 SHA1 SHA512 TLSH

Submit Download

8b255c3e-812b-45a1-9caf-542c36af77aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8b255c3e-812b-45a1-9caf-542c36af77aa.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0bb5f327-039e-4f7a-a769-c54614e35a1c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0bb5f327-039e-4f7a-a769-c54614e35a1c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

7283fe3a-65e8-4f9a-b480-81f3589e15a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7283fe3a-65e8-4f9a-b480-81f3589e15a6.tmp
Size 949B
SHA256 150a186368950de3521b6e91f30524579b64b42970fd53656b654c0bfac03433
MD5 71636f020fc78d04c7434fdf806bb527
SHA1 0271b11c789f05c976b28ca647b41380e87cbdd3
SHA512 82b25052353900d59e980fed673b3d7f46549e045b0d5e62972c5d712ea7a4a354f750c2365633e6bd5c0c676b4d0baeb065e92d5f9843d7342a8b03421ece4f
TLSH
T10C117DB3C7D586AE891116F09A24AE2BCE2D0506421C7C5989D4EF6BD7E3475E00159B
MD5 SHA1 SHA512 TLSH

Submit Download

bc5463a9-b676-484f-8b32-4c55799fdf01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc5463a9-b676-484f-8b32-4c55799fdf01.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bc60be992712546ed8ce53bb728b31c02dee51206947abbb313b480d923586a3
MD5 e49651f1b25fdf6afd8f8245c325d39d
SHA1 ac6b292847f51bc88559216dc531ca0255211ccb
SHA512 029427a348f7d5daad19535ffb7206042bd05aed38d3353ee96c395c5d555468d64b32917931d59e3295379d7a7b7fdfe90da64f8a25cd4048fb4a2ece3014f8
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBErqKu:XpnI9
TLSH
T166913351307B02803DBE254884A59A1A629135F3346CF66F7FBE54A54E6FE044EFF8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0b94f61-5e2b-480b-9d18-8c1465d085b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0b94f61-5e2b-480b-9d18-8c1465d085b8.tmp
Size 10KB
SHA256 fe94fa08de1888676a9bf41d53aa1fafcdc28cd9a69a13ccbb3c9115ffd475e6
MD5 eafcf860b56bcc8eac8790fdaafa91f0
SHA1 d7510eb983f2e9d16120c02c0ec1b1acaca44267
SHA512 0574d00f0583a51d1bcc120687343218bb90f9e2c570eb4cb758907a3069818b96d1cb8df3bf02212096da53d5b96263b9d18459753a24b173cf5cf5dd0d2bf3
SSDEEP 192:sxZvR6WS/fus3PIdpHrHW6+WNGYRPjz+RIg5KJ:sxZvnS/fus3gLHbGmfW0
TLSH
T1C222C9526E28797B8CCFD20DBA25BF53E6F9503251911E48AAFCC61C05E76CD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad876b65-ddb1-4344-9c12-d0935f8cecce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad876b65-ddb1-4344-9c12-d0935f8cecce.tmp
Size 10KB
SHA256 73a3ecfce3d46a83e98b84baad5de8ce8592023c72326e7b4cbcfffb4f6c40a3
MD5 8398164f805d954310cb5527c26ec21f
SHA1 137c7ab3e84f44a840156aaf99491ea301c82f54
SHA512 3f70212e9c2c5bf85fdae2d5fa17c505e229b58ce274ef711b734bade37d1ad894ef91d56832ce71623a1070a9fdb34c59b5276c82a621d1b5cb61d4bf6ed920
SSDEEP 192:sxZvR6WS/fus3PIdpdrHW6+WNGYRP+z+RIg5KJ:sxZvnS/fus3gpHbGmIW0
TLSH
T1C322B8516E28B97B8CCFE20DBA25BF53E6F9503291911E48AAFCC61C05E76CD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c94f3a93-0b10-40b1-99c6-b9ff26997d35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c94f3a93-0b10-40b1-99c6-b9ff26997d35.tmp
Size 27KB
SHA256 af8f98b4deeaae059bc3126e6132529ed93a69605374d9ac011f6911ad26d7ac
MD5 cb7bbe5de47304322a0ab43c43ed1b57
SHA1 462666eed52eb23439b0ec387a0f7bef04958e7e
SHA512 b52ba130fe46a6a2ab84201c726b1ef611a1d1ba4c3f4227150ce412cf345047a80a3d648f7efb8391e5b4210edd9378684d082f3cf3012e230ba2f434cb1c85
SSDEEP 768:73K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3jrop+YH:73K9uzYWvcQWsu1ja0HL7Q3Qp+YH
TLSH
T14AC2F93F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d8e62d7c-4fec-43ad-b710-c1bbe01c0870.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d8e62d7c-4fec-43ad-b710-c1bbe01c0870.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d47fdcbb-7213-429e-9759-c28f96413298.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d47fdcbb-7213-429e-9759-c28f96413298.tmp
Size 21KB
SHA256 15690f84159afcc7c813e18313107dcea82c6f0d9fb5e771762cc9e639a5ff82
MD5 bff68e83a14945099bc2d16108f19a37
SHA1 b68696ba29c6bd0268935c864fd3e0a020a9a085
SHA512 57d4fd2341da1e3d70678c185476260e1a2a73673d78e31e0942e7347f4ad652d93c3f46a9e9013b4f197afb6ac946ccc87343e6650e57edd38006464ee43a63
SSDEEP 384:biFiZcI8zsNF8TUNTUlIliwM/u/efefOjTV+WOiGewjE+2LJtgOIwZOyeo7oJ:2FQAcwgXzmnzODjElLJXse7+
TLSH
T1B2A26C335CA48D7BADFB9A45F58A32038EB850A7D596AB90E1CD9F1C01DA1AC130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dd9a183-a6f8-4866-8f1d-90c761a05aa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4dd9a183-a6f8-4866-8f1d-90c761a05aa4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f328a22f0badabf4c36b6109e9b00d029482b30f363a1cd2587475a21f31025b
MD5 d625ac9dbad0e3ed8335a71ed09f5286
SHA1 ade69cd8c6f9fbaf16283a0a1ad25f2a54e012e0
SHA512 413562d99ff2bbe9390f0735f68bafb79db139de9248ef54e00da24a08a31ed17c7833d061fa3a4a9dc7b7d48c0c7533093498b0a501f882545087f6f7a0d9ea
TLSH
T1F5410998BAFE1158B3B76F1A9FF6A86D447F7C672E07E55D10110E4E0A63A40C861B33
MD5 SHA1 SHA512 TLSH

Submit Download