c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-cuk3v1.htm
Size 34KB
Sample261002-trjptsxcpg
SHA256 c2d81496aa9aede610168814a238002ce7de294b0fe73040d224b8184e622e1d
MD5 966cbc85dbef6cabdbdc9c7e5496cc81
SHA1 a975b1e21c10dd0dc8fa0dc9ecc3984ca1aaf500
SHA512 4385a6988471168604246748dec63ed3bcfeecaffa1948583072d992edad73d6943a08af0c354e6fcfc007425da662357166b6909fa654e104b78c0e97c38a71
SSDEEP 768:3srOAOH3uia5QeAE4rYyH1UeH+NypaNJiA9Ky:39AOH+l51kYyHeNVJAy
TLSH
T15AF2E65356D19D37066392F5FCB8BD2C95CA8D0FC248AC04743CAA0C5FE4EA06EA7679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4740	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{61B6769C-1E44-4775-8EC9-3FDEECEF1332}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
176	msedge.exe
176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe
1584	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1584 wrote to memory of 4108	1584	msedge.exe	86
PID 1584 wrote to memory of 4740	1584	msedge.exe	87
PID 1584 wrote to memory of 3444	1584	msedge.exe	88
PID 1584 wrote to memory of 3444	1584	msedge.exe	88
PID 1584 wrote to memory of 3444	1584	msedge.exe	88
PID 1584 wrote to memory of 1984	1584	msedge.exe	89
PID 1584 wrote to memory of 1984	1584	msedge.exe	89
PID 1584 wrote to memory of 2520	1584	msedge.exe	90
PID 1584 wrote to memory of 2520	1584	msedge.exe	90
PID 1584 wrote to memory of 2520	1584	msedge.exe	90
PID 1584 wrote to memory of 2500	1584	msedge.exe	91
PID 1584 wrote to memory of 2500	1584	msedge.exe	91
PID 1584 wrote to memory of 2500	1584	msedge.exe	91
PID 1584 wrote to memory of 624	1584	msedge.exe	93
PID 1584 wrote to memory of 624	1584	msedge.exe	93
PID 1584 wrote to memory of 624	1584	msedge.exe	93
PID 1584 wrote to memory of 3388	1584	msedge.exe	94
PID 1584 wrote to memory of 3388	1584	msedge.exe	94
PID 1584 wrote to memory of 3388	1584	msedge.exe	94
PID 1584 wrote to memory of 3556	1584	msedge.exe	102
PID 1584 wrote to memory of 1060	1584	msedge.exe	103
PID 1584 wrote to memory of 3556	1584	msedge.exe	102
PID 1584 wrote to memory of 1060	1584	msedge.exe	103
PID 1584 wrote to memory of 2288	1584	msedge.exe	105
PID 1584 wrote to memory of 1092	1584	msedge.exe	112
PID 1584 wrote to memory of 1816	1584	msedge.exe	113
PID 1584 wrote to memory of 1868	1584	msedge.exe	114
PID 1584 wrote to memory of 5112	1584	msedge.exe	122
PID 1584 wrote to memory of 5112	1584	msedge.exe	122
PID 1584 wrote to memory of 3924	1584	msedge.exe	125
PID 1584 wrote to memory of 3924	1584	msedge.exe	125
PID 1584 wrote to memory of 176	1584	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-cuk3v1.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb8403c188,0x7ffb8403c194,0x7ffb8403c1a0
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,17464561168050002432,13865696322219285541,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,7208023459891632703,3444040857843312438,262144 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,5467583302497108261,10752089831236056721,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,2190581782414146122,5589084894794849482,2097152 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,11558761990565137448,7220331550641786293,2097152 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,15352997316219358468,2728082360619921368,2097152 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,12607847020877346453,15145827528048129453,2097152 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,2847069816733475089,14588752598620153724,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,8778695508472849583,9237777047102652567,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14070780613827895561,17945256874540634038,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,14070780613827895561,17945256874540634038,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,18127626981143745756,325498798638673622,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,14516114138472435468,2390000413625135611,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,13256414746387657187,3153910870292829857,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,5357011408592869219,607459499438337813,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,263768162531587048,10590435680111498661,524288 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,3025099990519338091,11697401856488615059,262144 --field-trial-handle=2296,i,17384082681986928911,8982984208818155995,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5526493b-0382-4701-8fcb-27131d3a570e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5526493b-0382-4701-8fcb-27131d3a570e.tmp
Size 8KB
SHA256 a8bf48f83421c73d51e9c1b990b70da8516dc24eec23606b2655149633a96368
MD5 4a30d1596d53a9736cbec16a33171510
SHA1 e76e2fae2516a234852ef5b9e25fbabae115ad0d
SHA512 eedb652fc319fe9b005357576161b1d48da83de8f07e77cbd670d4e5d3e2139de49825587db067f571b44e2080c54ff1276da9590083d41e2e7e46ad2cf68c32
SSDEEP 96:3qONkMQsjpfe/tyng7X5ih/cIPURHl8h4otop54YDiNBnP9ZvEI0IG2jb90ymtIO:aONg6IE7QmiUyJiTPuIGmeh+IC7sIAU6
TLSH
T1E902F935AC78BCBB8EE3AE05F4877A239FA5112BA5952F84D9D81F1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76e01162-7186-433e-b597-94041f6fc153.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\76e01162-7186-433e-b597-94041f6fc153.tmp
Size 18KB
SHA256 1e04b2f7d4cefcaa610d07fac8496d517f5e60eb16cf049bfd8ca15baa912314
MD5 10ae84ea386fc2229787012401eeeaa7
SHA1 256f9e8891ffad17bdd7673b1598204e1ce96201
SHA512 e208f7e01b55c583956a8532d8e0a63509a193d5fde807d15f1e85332f2b1037aeee6b3d2c1630fb7ee3d04e9a0b36e7de8ec53ba64a1ffc96486ae9e2c1cfb6
SSDEEP 384:lZcIhsNFqzl71cp+zIGmeh+bQjintgOIwZOy6LxoQ:dhFl7gIVhQKinXsFlz
TLSH
T1B0828D329C78ACB69DF79541F5873A035EB49227E7C9AB80D4ED5B1D04DB298030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77599be1-1fd7-4efd-b9f5-6a7a8a776df9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\77599be1-1fd7-4efd-b9f5-6a7a8a776df9.tmp
Size 8KB
SHA256 c15f7d0b7c8a82a18e2cf309f487ed2e86678e4a4e8190dba2af92555a7d5434
MD5 35ad4af207789557bf1baccef4273248
SHA1 a020fdaedb338bf63a90b668ae0c9e741158b2d4
SHA512 78d123b0430433cb16cf206c44addfb8f49726cf814358ebdf47a5a90bef8c64e2fa115bc9a75372dc54f4c49598c9bf550499d825e6c769251bfbf32f20e7c1
SSDEEP 192:aONI6IETQmiUyriT6uIGmeh+bQX27Haq/U6:aONI6DFb6uIGmeh+bQUHnU6
TLSH
T1B7121836A878BC7B9EE3A941F48739235EA55327EB897F84D5DC1A1C00EF25C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

401a0c95-4738-4167-bda6-6dc53e30a6d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\401a0c95-4738-4167-bda6-6dc53e30a6d3.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

46ad7cf6-acb2-41fa-b7b8-65ed0acdb967.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\46ad7cf6-acb2-41fa-b7b8-65ed0acdb967.tmp
Size 10KB
SHA256 6a7239a3cab07fc3d2606245ae5e367ff364f7d1d190344049ef91b893d30594
MD5 5fc3c91ebbc1db7028ea208367bc441e
SHA1 132226ad50cd80622f78645c1439bff952e8178e
SHA512 18fb977dd8c3de3c4b1a0f238397dc368fdc6ba34e4a8fd27426801fe0e27bc7fd8b24c0e3e259e36182e8287982006f01a46d4754365076f098ff1d635988e6
SSDEEP 192:sxZ7RuPWp/fusl6BIdpduHW6+WNGYap0fMIg5iJ:sxZ71p/fuslLwHbGFk
TLSH
T12822C7126E28A97B8CCBD20DBA55BF53E6F9513291911E48B6FCD61C05E7ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

728bef34-8147-4d5e-8a08-5fbe5afd3e57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\728bef34-8147-4d5e-8a08-5fbe5afd3e57.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

969739e1-beb3-46c5-85b4-26312b52fbe5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\969739e1-beb3-46c5-85b4-26312b52fbe5.tmp
Size 10KB
SHA256 0be967b915843a590b359aed2ba6e48f4394ca665dd2333d53b1479415afedae
MD5 75b5ae7a81185a3c55d6af652eb97f8c
SHA1 0b830259a7837f884a5f8a0a52da53927d8aeadf
SHA512 2bf1af0ccea3d06efcc41229453454008e6039f4764158d005eafeb3242d4a5d7bb00668705372e6702c1235c0e68f5a38d6aca71e8b464d5603aefcaf86b25c
SSDEEP 192:sxZ7RuPWp/fust6BIdpduHW6+WNGYapYfMIg5wJ:sxZ71p/fustLwHbGhm
TLSH
T12222C7126E28A97B8CCBD20DBA55BF53E6F9113291951E48F6FC961C04E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f66651c-db3f-4030-8922-f07a4ad97ee8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f66651c-db3f-4030-8922-f07a4ad97ee8.tmp
Size 10KB
SHA256 c1d5a462b2a1e471e9662147b0052917723fe76386642f5c457bce7c8a81e424
MD5 5dbd5db079df8a2dc9b17e802f419590
SHA1 ad5546068791e4ae8ae37ffb4e8eff950157d003
SHA512 f11a2ead0c9fba9f4d4adcc5428fff6b11c0c8000a854ddb19e21e1802b773690f59c9cd9c3a89267e867f94cad53d0972eee53308a4a7ec75340c268512efe5
SSDEEP 192:sxZ7RuPWp/fusl6BIdpHuHW6+WNGYapbfMIg5iJ:sxZ71p/fuslLOHbG2k
TLSH
T1CF22C7126E28A97B8CCBD20DBA55BF53E6F9513291911E48B6FCD61C05E7BCD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d552d4c7286aecfa797eec4608458fc717e5e7433bc6861605dd27e58214ee88
MD5 354fec990ab7d280e9092f383a17c66f
SHA1 0aafac561433dbc84f57e1f42ed396b2642959a9
SHA512 f3a0c1bc79a567d9aa3bbb9194345a59eec8742d161921c3bb3b617de4c9966cd55aad290fcca07888dbdfcd30e83c5e8ef10adc1f808682ba22f3050f76d850
TLSH
T177E026E50CC8C22EF24C64D74278A78CCBA03A5B93C0695E1B19C6887607440A7E26A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d71e53fcd2c3a8ba2c431bf7cb188705becb38cafb4f1babd1a806f2f0daac00
MD5 96b1293c8a6796ee496906313ab59375
SHA1 45d151c5616382aab6a3663881d28f87ac430e09
SHA512 1ad09896f50aa1358c0fe4608d881cfe09dc72b2316d7cfcb3fdb1c58489ebc018e7e3b14ad12af2f3b52ed1d54ef06ebfd9cdf62febf610b38f8aa855ea625f
TLSH
T13251D68BC768C2AAFB68423041F6D3873330EAA1EDDB1F1A24ECC5BC8F0A7548108314
MD5 SHA1 SHA512 TLSH

Submit Download

efc78abd-2105-450c-b8c8-7728e6d30757.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\efc78abd-2105-450c-b8c8-7728e6d30757.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

12359bd0-42e8-4e05-9326-91ecc79015ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\12359bd0-42e8-4e05-9326-91ecc79015ac.tmp
Size 733B
SHA256 b9196686d3e59f52afb60bed87cd72f39281a01f7eec67608bfd92d19729b1ea
MD5 f0337cf88dd08d67481de29c3bef716b
SHA1 142f210bd30b142de077357261b0ba5ba721898b
SHA512 d9963000e3376f0a0b3f7b4f55bdb5da89d695dcd9a3f8852cf519b73b23a4fcb863507a89625140edc3666d4dce0b4035026240a1503ddbdb8fa73a74e79748
TLSH
T16C0190B3C3E495BE891056F06A14AF17CE2D0502431C7C5AC5D4AE2B93E3475D10149B
MD5 SHA1 SHA512 TLSH

Submit Download

329c2398-626c-4049-a0e5-3a9b5d6c4339.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\329c2398-626c-4049-a0e5-3a9b5d6c4339.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

da3ad4a5-3772-4737-ba6a-2558a413b1a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da3ad4a5-3772-4737-ba6a-2558a413b1a2.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aeb530eaeae4ba7e414dfa1473078e165a311a5d9bad603349a0f0e31bf9b3f5
MD5 f7ded6076cc29a58862f73f429393a7c
SHA1 66f2b83b3c0ef2cf39ff523ddaaffcbc85118933
SHA512 cc04ee0fe3f4564baf91bc9af83448ea7306333aced429ed81778fbfa7c22abae2a06eb68cefd5dd99b0caf327cc4db7341448bb43fcf75e3c1c6188db3e0353
SSDEEP 24:KjNKxUBInKVhq1CS4rjyXrs/U8GIZKMh81SSp6JHHaJ8O5hxxdgFl6QIz1dKWqhv:KsuInKTq03yNRIZKa8kWAIjKh6cHyo
TLSH
T1DA913E05366A0214397E694D42A4C72A528231F3306DF62F7FFC50AA8E6BF054DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd5322b9-f65d-4a90-845d-3ea2dd232bd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd5322b9-f65d-4a90-845d-3ea2dd232bd1.tmp
Size 27KB
SHA256 53c9f466b8968c26b1b1e8d7553daf91431cbdb23b25ce63174fe148a672f1b2
MD5 eab6805bf677eb80812ed56d0094c5f9
SHA1 9bce5982a16a32ccab047634456b6948da28c85f
SHA512 e05fa1df9b6040c9de0e5129f979bc18984cde2fcbb0d65b46ffbb57f63b21430852b29b6d6ee53b11b536ac965615db5bc593b3512bc5266a5fb63d26303cea
SSDEEP 768:muWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Fro4dfe7CmRw:muWPcLKWvKeEeu1jaClLiF7+4dW2mRw
TLSH
T1FDC2FB3B640CCB7E5FC01A9DDC5A6FA76E9802C79A644D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0b12f4e-edf3-4476-a241-43dee3601484.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0b12f4e-edf3-4476-a241-43dee3601484.tmp
Size 9KB
SHA256 64174b77488e4fcfbb89e75532255bfed3a1efca1a54b28d3585e5c36248f0ce
MD5 0ffe99a3c2c4fb372de6e8a8fc53a0f4
SHA1 eef334350c3cb2450518b8a35b7c81477439fd33
SHA512 64dc0720c75b486ef66acb8d9f2684585888db6112ff8d3005ba37d2d59b081d5649d024c46c96f4e22bd9c7cf8522f4aaf0e553052457df567453210f213aea
SSDEEP 192:sxZ7RuPWp/fusx6BIdpduHW6+WNGYapYfMIgrJ:sxZ71p/fusxLwHbGh9
TLSH
T12922B7126E28A57B8CCBD20DBA25BF53D6F9113291951E48F6FC951C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7dd3a3aa-2f30-46b0-815f-64260628750d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7dd3a3aa-2f30-46b0-815f-64260628750d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a4fe476b-5452-4428-bc6b-3d227941a394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4fe476b-5452-4428-bc6b-3d227941a394.tmp
Size 18KB
SHA256 87b7841e0ec0082cdd334afb61992f3526b356f83ed9095023a15bfe817f717e
MD5 876de00d3530bf732cd9fa737dd382ef
SHA1 d733b645612941812dcf134ed2627e9692d42a28
SHA512 bdd96cb9066b4e5ce0593355154d58bc9643c9802fe33339579a04e8634f74725aa66494840d9d2bb7df43327bbf73e0f61ad75ec86089cf4a08587c66b67e99
SSDEEP 384:sZcIhsNF1zl71cp+zIGmeh+bQjintgOIwZOy6LxoQ:6hgl7gIVhQKinXsFlz
TLSH
T141828D329C78ACB79DFBD541F5873A035EB49227E7C8AB8094ED5B1D04DB658030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da283bbb-5b43-4ffd-9177-50849000fa59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da283bbb-5b43-4ffd-9177-50849000fa59.tmp
Size 21KB
SHA256 644d0bed884416b26ca2456337d19f6e35fe2fb753180df2d5ceb52f445ce57a
MD5 f5ee0e5a00196477e06ccf77525416eb
SHA1 6a3580ec25c2cebeb9e1062dc0ff9ac3b7f71e9b
SHA512 96cc52646e4c6a62dc80e32e6b5d0969336c65e6738d42ad0a1812e5a9666d7486316f75d7a9f429020e9ea64c05afc4d74ad234646079c62f2544f470157d7f
SSDEEP 384:uiFiZcILzsNf8TUNTUlIl1zl71cp+zIGmeh+bQXeintgOIwZOy6LxoQ:FFQfWwgzl7gIVhQeeinXsFlz
TLSH
T16CA26E338CB8DC7BADFB9A41F58A36038EB55267D6C5EB90E6DD5A1D00DB198030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d0d8e61-15a3-4c94-8c91-57c16de63028.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7d0d8e61-15a3-4c94-8c91-57c16de63028.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 43e7e873b4007762ca5209a55dbe9e13b30d574acdc76ba737bee319562c0d98
MD5 beb3481dffcd5cfa651c1eba3179bf42
SHA1 ec15915881579a8b4649629ca746a9a1058e228f
SHA512 743717064da8971624a641ff37c18393fad5ff05a0cd500a0469986e236aefc38d6d2c41dcd83d8da321f5d399ebba71ba0bdbe9dd6e3e0e8aa2d4e185803204
TLSH
T1DD411859B6FA1144B3B76F5AAFF6A46D487B79372E06D59D10010E4E0627B00CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download