3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 15:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-pv5gwk.html
Size 171B
Sample261002-swwphsxvbx
SHA256 3e10b452175f0acbfcda6bc2487e308e0c5f4913f1ca5b0ed77be7a462a066bc
MD5 e082ebc14f6b24945336f6450b985e45
SHA1 df12ad35c265b0198582e2dc94e0a93048e4de82
SHA512 8dac8fb7101ee6a50ec58409a7d51009d9a3f6b1266377cad6f7f9001bc6f6734ffc067e7cfd0f17a1d0e288803fa8c8d37925590f6421772323ce99a4a9a1bf
TLSH
T1E4C08C7D10C13C150270A93C1DD3B397EC93198E01422B41308180232F35620CED32D0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4400	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{F117B0F8-0F00-4535-B27B-6A31413B6179}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe
1900	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1900 wrote to memory of 1676	1900	msedge.exe	85
PID 1900 wrote to memory of 4400	1900	msedge.exe	86
PID 1900 wrote to memory of 2320	1900	msedge.exe	87
PID 1900 wrote to memory of 2320	1900	msedge.exe	87
PID 1900 wrote to memory of 2320	1900	msedge.exe	87
PID 1900 wrote to memory of 3744	1900	msedge.exe	88
PID 1900 wrote to memory of 3744	1900	msedge.exe	88
PID 1900 wrote to memory of 4332	1900	msedge.exe	89
PID 1900 wrote to memory of 4332	1900	msedge.exe	89
PID 1900 wrote to memory of 4332	1900	msedge.exe	89
PID 1900 wrote to memory of 4496	1900	msedge.exe	90
PID 1900 wrote to memory of 4496	1900	msedge.exe	90
PID 1900 wrote to memory of 4496	1900	msedge.exe	90
PID 1900 wrote to memory of 2076	1900	msedge.exe	92
PID 1900 wrote to memory of 4000	1900	msedge.exe	93
PID 1900 wrote to memory of 2076	1900	msedge.exe	92
PID 1900 wrote to memory of 2076	1900	msedge.exe	92
PID 1900 wrote to memory of 4000	1900	msedge.exe	93
PID 1900 wrote to memory of 4000	1900	msedge.exe	93
PID 1900 wrote to memory of 1984	1900	msedge.exe	99
PID 1900 wrote to memory of 3276	1900	msedge.exe	100
PID 1900 wrote to memory of 1984	1900	msedge.exe	99
PID 1900 wrote to memory of 3276	1900	msedge.exe	100
PID 1900 wrote to memory of 2180	1900	msedge.exe	106
PID 1900 wrote to memory of 4584	1900	msedge.exe	115
PID 1900 wrote to memory of 5036	1900	msedge.exe	116
PID 1900 wrote to memory of 4804	1900	msedge.exe	117
PID 1900 wrote to memory of 5032	1900	msedge.exe	127
PID 1900 wrote to memory of 5032	1900	msedge.exe	127
PID 1900 wrote to memory of 536	1900	msedge.exe	128
PID 1900 wrote to memory of 536	1900	msedge.exe	128
PID 1900 wrote to memory of 3388	1900	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-pv5gwk.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbbef4c188,0x7ffbbef4c194,0x7ffbbef4c1a0
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,4593313155048289326,8258280099710297508,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,14307483857258717539,5883019676758423366,262144 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,6731274459327927117,3683644261199305267,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11029427084996610462,1612963087224138721,2097152 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,7668042540825879151,15898102578807823079,2097152 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,8082472801785603295,12073552585010001850,2097152 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,103959533676008100,16792747774621061203,2097152 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,2676808887481640583,8735730485988953725,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,5150797497501728380,16526604136676945888,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,15937106384026363557,8012735291205386852,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,15937106384026363557,8012735291205386852,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,16771683384942393464,11574029034671792056,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10566006381484528106,4201063333021320330,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,16962247974953592596,14422873665253534286,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3076,i,7254867156328681958,14246517483653094326,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,5904679547494999988,7759598838199118216,524288 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6084,i,14203560035592518141,14744265928511385969,262144 --field-trial-handle=2256,i,7099324771959230527,4389410199157374238,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3ab12896-1fab-46e7-a020-a24c6dc85a78.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ab12896-1fab-46e7-a020-a24c6dc85a78.tmp
Size 21KB
SHA256 6ad8d16b27c9dd96b7dcb911158b46c123f58b5ddd57f25a22bfc6b2ff5e6b03
MD5 5566875c08bef854b92ab9da04b19e9e
SHA1 ed8e2ab20d202c900c9c674bcd6efe4e9781185d
SHA512 3be2f5045bcf1c8861e6b6ec5c9824e30431838fa61036049598d4e6a917bfd9c8c410ba45da97b5326817ab3a97c509b5fddb5d9dc1b649491d9b4139b2d189
SSDEEP 384:9iFiZcIgzsN28TUNTUlIlUw3hcMRW9OjTVu6diGrnRwJrcAtgOIwZOy4o4o9:0FQ8LwgP6wnbNihcAXsc42
TLSH
T18DA26D334CA49D7FADFB9646F58A32038FB48167D985AB90E6DD9B1C00D75E8130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56edd52d-740c-4735-ad6e-71da8b78d47e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56edd52d-740c-4735-ad6e-71da8b78d47e.tmp
Size 8KB
SHA256 c4f23b75a81df28343574312c07aab94720ca5fdfaa80ff788c9e94d9aeb74b1
MD5 bac1a6ef92d6f1088843ed2abdf3feea
SHA1 371c0e6d18deeba47a64737059775bf9da68f207
SHA512 73b9e034d0eb56600d49a30b9028c6aa28ed39c97e4fc9d716f4cff5ce68358ecf8d9e142b897d37331e76d38623f748b416c4dd42104255e20699d4e2884dc4
SSDEEP 192:SONn6yUQmiUy5afOCTVg9l+FdV0R0rnhxFJSJriG3UOrqxOU6:SONn6LDfOCTVu6diGrnRwJrwAU6
TLSH
T118121B35A8686C7B4DA3B542F48731139FE48267DE8A3F94D5EC1F1C01EB66C234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cf02ff9-e884-47c2-bdeb-b3010278b757.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5cf02ff9-e884-47c2-bdeb-b3010278b757.tmp
Size 8KB
SHA256 f5611bac275561b4973002b0d6a81922875cc9def0e7058951c46f0f17d917af
MD5 b8e38fba61207b7c0113e6e95f45af6c
SHA1 c034510604efeaa57563ad38f51403acaddc5c2b
SHA512 d7e24e674485077f3b7f564f299f8a687d65293f2f2b70c2998392d10dc815aa4c05ac53a4e744bb91a0979d920e1d31fbc7f2783ccc0b2218615fc3739ebb79
SSDEEP 192:SONa6ygpQmiUymatOCTVg9l+FdV0R0rNzP40U6:SONa6lHCtOCTVu6diGrBdU6
TLSH
T1BF02C835AC783CBB8EF3AE06F48736139FD4116BD9552B94D9E81F1C01D765C2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

3b7805e6-97c2-476c-9f5e-9575808da79c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b7805e6-97c2-476c-9f5e-9575808da79c.tmp
Size 10KB
SHA256 606260067a3f6fbac2fa96a4c82b236f1f9d8bf33be5d8b3369c730fc8a03bf3
MD5 0b16e79ad2d27d323953e2a3f1834278
SHA1 ca97f031d52d0a45477fbcb0ceac65abfbeead0d
SHA512 bedd537fa851c216f0e948761d690101a9870ec9519043057f7657abfbae781618c667675695b43bf8d996e48e54ae1e44f030b8272d5e8b0d3543a3a432bc44
SSDEEP 192:sxZhRPW4L/fbsUwZsIdpHeHW6+WNGYRP4ylIg5LaJ:sxZhg4L/fbsUwZ1+HbGmH1W
TLSH
T19822C8526E28B97B8CCBE60DBA25BF53E6F9503291951E48EAFCC61C05E76CD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c188ec5-8c89-436c-9fab-ed78d3aaa43b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c188ec5-8c89-436c-9fab-ed78d3aaa43b.tmp
Size 9KB
SHA256 b2493c634d02502559f01f19c271d63f1b13101df3644e495bae517c9cf31f71
MD5 b24ddbdeceef7884c637b42126939921
SHA1 b7c6c4277b3fdff88a4a82076760f397c6120eb5
SHA512 bf126eb60dfbee2690070c153430bef573b8cf305e6db8d7d14b4a00c9b8fdc768fc51cabc5df849860084cf5e4e8c970659e412e1d84319e1863969a9d80dd6
SSDEEP 192:sxZhRPW4L/fbsXdZsIdpdeHW6+WNGYRPRylIgrJ:sxZhg4L/fbsXdZ1EHbGm49
TLSH
T12712A7126E28B57B8CCBE60DBA25BF53D6F9503291D51E48EAFC861C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

499edb23-add4-4f5d-8533-512347b04f88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\499edb23-add4-4f5d-8533-512347b04f88.tmp
Size 27KB
SHA256 5397310bf0f3b91e26721045620ae132801f5a30a1e702805c2d8b47f07efb04
MD5 a0a351ef1e5c35477a7391137dbf919d
SHA1 82c91c9b1ff3724fcbc5343b7ac449b810763d5c
SHA512 e39d7709403bc01ffa013939f4a1629db149aa8754bbeb2f9aaa1a931c4f8adbf2b53b571400dbaf6c9671d5e8d981433b86f2967d9e6d84ab0c621633aabd47
SSDEEP 768:wGK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k37roTp+vb:wGK9uzYWvcQWsu1ja0HL7Q3ITp+vb
TLSH
T16BC2F93F640DCB7E4FC01A9DDC5A6F972E9802D7A6588D4087FA984C02C77EE52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a434172-341d-4e0f-be27-36dd128f46e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a434172-341d-4e0f-be27-36dd128f46e6.tmp
Size 10KB
SHA256 d9ddeec681ee4d4ffc296303860d2e9aa979deb46d8e1186232c8d2840c784e2
MD5 2d2ded6ef7d8216f9a2c8203121424f8
SHA1 015fc60a5a2588da9aaef2ca5d58e685ffefeb17
SHA512 fa0f69cc129103c955a0394ce771f3eed4c4292a1ce57c63edd6cdaaa5d476f12af7d612bc82210beb12bb60d55700162aeaec58c2e8d2e1aadf23bf21aab9e3
SSDEEP 192:sxZhRPW4L/fbsUwZsIdpdeHW6+WNGYRPHylIg5LaJ:sxZhg4L/fbsUwZ1EHbGmS1W
TLSH
T1D022B9526E28B97B8CCBE60DBA25BF53E6F9503291951E48EAFCC61C05E76CD130740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a85d011-fdeb-4c31-aab2-bba2b7a47f32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a85d011-fdeb-4c31-aab2-bba2b7a47f32.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7271cd512a25f5b3546b4696ee99f2895c4a00bafd7911c5dadd59a6a53e8eb4
MD5 5f94b1dcd8b40d2ac6c19fb106caef0d
SHA1 e6c7ee1650d9a8c259cd50e56556e10728801e96
SHA512 93fd2bc54cf7dd5a57ad9d1c678ae7d3b1e4870806c4106f515b7e4e5eb8162c9672f5bd1e2b7a64e04fe830de567646bf4148c4a733e893600c8bb0e1e83a34
TLSH
T18BE026EC06CAC26EF20CA8C741BC674C83C0361BD3C06DDEAF00CBC4B406554B6E26A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 503044f83256c126f7662b81166ee0ada30ef23c521fad1315dc0309a8d87ffb
MD5 9488f634796f8606023b486c1d3f22a4
SHA1 f5b52427d293328fa25c6f10fd18aab09592eaee
SHA512 7e4e3164ef501ab272f79df5f23044b5a24d678a0ba55371726cba75d294be062a6c52f459a38f6571b6e8d9c68b69f7468df161eb5b27f34b5dff9711e31ec3
TLSH
T1A651F7C4CCB14394FB9A0F79D2D801CF36B867A1668BDF3E1A9DE8B9580AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c0b5187f389669ee7106f5f25fc7002fbbedab471f4664296a727d316fe53143
MD5 16ff5b4c982163666205916039f8ce0f
SHA1 8aa2a7159a70bef2e465990a7ca7a4dd972e60e1
SHA512 3de8ee0bc52c2b43f66f98b43d41e250925a94ee64359061c9f5848e8a5bddbebfcf6e6f84fa6bd3e2324ae5628184776e2a3ce556beb2ea4c1a8479ed2c0ca4
TLSH
T19451F7C4CCB14354FB990F79D2D801CF36B867A1668BDF3E1A9DE8B9580AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

e263a925-5d95-4ab7-9f49-40779155d6f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e263a925-5d95-4ab7-9f49-40779155d6f8.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

5bd7e830-aafe-4442-8785-284c98c1a919.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bd7e830-aafe-4442-8785-284c98c1a919.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

88bd4dc6-121e-4fca-98ec-dacff6d7f948.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88bd4dc6-121e-4fca-98ec-dacff6d7f948.tmp
Size 949B
SHA256 5803aa8418729a50bca1a9174243738a564992f5a31a9f5c03b45f6cbf24d47e
MD5 a7a95cbca08b2ba6385667e58c17e3d9
SHA1 d5ae8e19dd9efb7f815dcb54de43f35c8cbb9884
SHA512 787872e0e5e20591627d0240dbcd210bcc243373078afc8902fa6272239c6b373eb764b7d89d9bd88019065f341bd60f03ea505742c1ba44c854c145c0f9604b
TLSH
T12E117DF3C3D585AE8D0116F05A24EE1BDE1D0506431C7C1995D4EF6B97F307AE10259B
MD5 SHA1 SHA512 TLSH

Submit Download

c0bea699-8555-4e62-bf42-0649a72718e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c0bea699-8555-4e62-bf42-0649a72718e5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f8e22438-3ead-47d9-bf7e-7264671f88a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f8e22438-3ead-47d9-bf7e-7264671f88a4.tmp
Size 9KB
SHA256 5ef5db95d08fb61edd529f63d7ddd50bd9389df848dad01b65e1e493eeb84f5b
MD5 893dbbc58879b166091319c608056f18
SHA1 7f12c449255ed18ac6e432030fde3df779ee1849
SHA512 1b8c6ab2f3a6047326534fdb30224ecfc35c965a185f88ca790143b944f6adbe546c80b3a2b79a49e22b0f1a8a190172173d12cbc19ad4249e9388886ff00079
SSDEEP 192:sxZhRPW4L/fbsUdZsIdpdeHW6+WNGYRPRylIg5L4J:sxZhg4L/fbsUdZ1EHbGm41c
TLSH
T15822B8126E28B97B8CCBE60DBA25BF53E6F9503291D51E48EAFC861C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38e176be-b355-4010-b851-6e9e62d63671.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\38e176be-b355-4010-b851-6e9e62d63671.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

e31062ac-ea71-4838-a37d-b87cf1d0e14c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e31062ac-ea71-4838-a37d-b87cf1d0e14c.tmp
Size 18KB
SHA256 e706a8f4db30682c3cf7040580dd73e1185771823f9cfc40a32a4f8f94c88001
MD5 10a76f5c03757f613f294b1ba40dafad
SHA1 b02c30f4853dbe3bafddf444c722d8cec80974e7
SHA512 ace8e0fe4e9af7790a945aa15ab12877e8641f4634da2b852c908695c6f5605566696250e2b11664404a6021999ac4244f86c5cb208f9805f233391befa967cb
SSDEEP 384:OZcIhsN2Uw3hcMRW9OjTVu6diGrnRwJrIAtgOIwZOy4o4o9:shD6wnbNihIAXsc42
TLSH
T164828E315C782DBB59FBA106F48B36039FB8C567DAC92B94D4ED9B1C01D65E8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f5a7009-b169-4549-a7ef-65d2e5fc6033.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f5a7009-b169-4549-a7ef-65d2e5fc6033.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1f1e57c-670a-4ed9-83dd-559d1be7f01d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1f1e57c-670a-4ed9-83dd-559d1be7f01d.tmp
Size 18KB
SHA256 ff9df217f3941985a318240412e6b39c429a1a089b569e59424f31741a35fc2b
MD5 7062be0c80edbddbadd275a8bb5ea257
SHA1 a48c43513add7eb11ffe273233db76342a8af670
SHA512 dbbba7f35fbe9dc6e32f753f94f041daf5c8314f7dbacee38311abbc44fb1b132a30154465e1c90049e2cb6602c45f849851a2cdf7bb5ce52c31c8f604b1cbf3
SSDEEP 384:aZcIhsN2nw3hcMRW9OjTVu6diGrnRwJrIAtgOIwZOy4o4o9:YhM6wnbNihIAXsc42
TLSH
T14D827D319C782DBB59F7A106F48B36039FB8C567DAC92B94D4ED9B1C01D65E8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b267712cbbe0c5c6e7b555238b9ad788f711484c748ff29db539ec2d7d26399b
MD5 5dbaad3ea995c96341b14053fb66dbd8
SHA1 d9f479b0dfdd1001f7e320e3b954d7c6940d40dd
SHA512 43fcca44530c8cb8613b46bf66ab00d811ff22387b138326062d7530834e7c3fe038fe5b212364c15fe21fd77db6078c01559f96a9d3157fb549dcc2d323a46c
TLSH
T146412B58B6FA1158B3B7AF5A5BF779AE447AB9772E06D45D00110D4E0A23B00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download