5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 17:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-hfd7p0.htm
Size 1KB
Sample261002-v1237st1av
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4356	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{98AD09AC-8711-4B20-98A4-328660CD75C6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 1416	5020	msedge.exe	87
PID 5020 wrote to memory of 4356	5020	msedge.exe	88
PID 5020 wrote to memory of 4308	5020	msedge.exe	89
PID 5020 wrote to memory of 4308	5020	msedge.exe	89
PID 5020 wrote to memory of 4308	5020	msedge.exe	89
PID 5020 wrote to memory of 4660	5020	msedge.exe	91
PID 5020 wrote to memory of 4660	5020	msedge.exe	91
PID 5020 wrote to memory of 3904	5020	msedge.exe	92
PID 5020 wrote to memory of 3904	5020	msedge.exe	92
PID 5020 wrote to memory of 3904	5020	msedge.exe	92
PID 5020 wrote to memory of 4344	5020	msedge.exe	93
PID 5020 wrote to memory of 4344	5020	msedge.exe	93
PID 5020 wrote to memory of 4344	5020	msedge.exe	93
PID 5020 wrote to memory of 4276	5020	msedge.exe	94
PID 5020 wrote to memory of 4276	5020	msedge.exe	94
PID 5020 wrote to memory of 4276	5020	msedge.exe	94
PID 5020 wrote to memory of 3800	5020	msedge.exe	95
PID 5020 wrote to memory of 3800	5020	msedge.exe	95
PID 5020 wrote to memory of 3800	5020	msedge.exe	95
PID 5020 wrote to memory of 2040	5020	msedge.exe	103
PID 5020 wrote to memory of 1236	5020	msedge.exe	104
PID 5020 wrote to memory of 2040	5020	msedge.exe	103
PID 5020 wrote to memory of 1236	5020	msedge.exe	104
PID 5020 wrote to memory of 408	5020	msedge.exe	106
PID 5020 wrote to memory of 4480	5020	msedge.exe	113
PID 5020 wrote to memory of 3480	5020	msedge.exe	114
PID 5020 wrote to memory of 2068	5020	msedge.exe	115
PID 5020 wrote to memory of 4264	5020	msedge.exe	124
PID 5020 wrote to memory of 4264	5020	msedge.exe	124
PID 5020 wrote to memory of 2808	5020	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-hfd7p0.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffc8a49c188,0x7ffc8a49c194,0x7ffc8a49c1a0
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,11457317682272181122,15519333910067379398,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,40213262185143642,14364264665063878170,262144 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,13816222351802498389,7527924100976251275,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,4773852944848788839,2049412959292467022,2097152 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10311397154212366605,5836506908923659686,2097152 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,16296579120909997721,11255553613072537441,2097152 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,11040010765299992815,14047800613077756999,2097152 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,16579124605837430885,13304724264322008331,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17557656182822665817,461181478872925924,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,16372568312194072886,7741106397348259082,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,16372568312194072886,7741106397348259082,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,3692491419653213069,3789440616477907902,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,6531519276532774131,13674414553516835850,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,1357858577184001115,15252861852618488711,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,5004312124538237743,14751798856420399142,524288 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,5079074057941485666,11082418184597893110,262144 --field-trial-handle=2264,i,10854845949411778045,11088192472606845705,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

550622c8-c280-4ea6-9d88-1fa9dd594565.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\550622c8-c280-4ea6-9d88-1fa9dd594565.tmp
Size 8KB
SHA256 6bb25fa52361e886368673a4f884da97729387cc539d7efbe533225d30a2e441
MD5 886f17ae00a65b1f00df075266ad4474
SHA1 a1cf56abdcaffb5cd6bd56c611576472fc4a0932
SHA512 aec1175426670a5211908fc5b477644cf2ba05960d03311b998cae69ba41fbf5540224773cd49143a893f09a8b469d4f3741b4c0f1e7bcd6c170d4e07e2d4807
SSDEEP 96:KqONknQsjpfbUmjH5ih/cIPURHl8h4otop5zaDwBKP4v+Y1xf//ojdOx5YEqso0e:BONr6JUm0QmiUyg0so//aOBCCaU6
TLSH
T15002C839BC68ACBB9EE3AE45F04777239FA4106B96915F84DAD96B2C01D715C2303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

604cb04d-aab3-4bd6-b0ab-74bccac11a70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\604cb04d-aab3-4bd6-b0ab-74bccac11a70.tmp
Size 8KB
SHA256 d992589efb7afde67aae2a19ce9b78ed3c5877dbd4e41e3bd5b6121ca9487272
MD5 25cf45132a418a76734fbde8c6a86175
SHA1 af1488206f731e65fae4b31ce762ab8010a07113
SHA512 9b13b13d87bec369b34cc4f982348748abf22062291530c26710e3d1720367a5b42ae9a2963b1402797526a16c008c6986f31a46ac1657afb9e9244d543054a8
SSDEEP 96:KqONkpQsjpfbU0H5ih/cIPURHl8h4otop5zsXDwBBP4v+Y1xf//ojdOx5YEqso0J:BONp6JUrQmiUyi05o//afVHNx+qwU6
TLSH
T1ED1218357868BC775EE3A585F04336239E74416BEB856F94DADC2B2C01DA1AC5307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8640124a-590c-4114-afc4-687f785f86e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8640124a-590c-4114-afc4-687f785f86e0.tmp
Size 21KB
SHA256 a46d3757b4f54d4bb619eec41ea22dc5f299a572025980ee9c7e2b3e02f608ad
MD5 dc30e899a15ebc459f243774416fab1e
SHA1 6f66c13769d4d863df483ecc749ad3bf703fe779
SHA512 20aaa7a194c0f659b475bbace97db5fd402d5ef6f09b1db778273ee64bf78c9b862e3ef3b9143c7f5b69bb39ef23b260017250cbe7f6a6fe6067f4f5301def15
SSDEEP 384:HiFiZcI+zsNo8TUNTUlIliuLMkbehbh//afV88tgOIwZOyxLBoJ:CFQehwgw0MfN/CN88XsWFW
TLSH
T142A27D339CA8D8BBADFB9A45F14636039FB440A7D6D5DB94E6DDAB2D00D60E80307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bee430f-a043-4ec7-bac8-00657b3fc1f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9bee430f-a043-4ec7-bac8-00657b3fc1f1.tmp
Size 18KB
SHA256 6f8013e4f8beefb2fde4e7e51c39c038cef508e35a641046df6a16c81e2c2cb0
MD5 d8e68e2861fa81d3682039b1a86afa4c
SHA1 963a620ec5642b2fa65e03d0e197837e70d33d6b
SHA512 98a2cb7318baa7d214ef3a7ebb91b56e979db0a5107b15a03dca8632fad4ee7ef94b2fd6f620809c01cf1dd9d2684f0d54c0f7fa36d9d00e1846a754adf75e2e
SSDEEP 384:UZcIhsN4iuLMkbehbh//afVK8tgOIwZOyxLBoJ:Sh60MfN/CNK8XsWFW
TLSH
T1FD828C36AC78ACB75CFBA145F04736035FB480A7A7C59F94D5EDAB2D01E91A81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

10e635f1-b5bd-4ef1-9ca7-60d937ffc034.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10e635f1-b5bd-4ef1-9ca7-60d937ffc034.tmp
Size 10KB
SHA256 2e5178e6e2a5dfb7bc6bc52f8a2511028e232e5ac9d4b002b01eaaf5a502c493
MD5 9ee33cf1001c8350732c0f66f66a7c31
SHA1 d9045920201596222dcfb32978bb56f1ae686c97
SHA512 89de4096bb3061b2b1d631697d2415ade7a8a9e5491f879ce712600245d2c7e397ba7ece08094ae890829fe13e9c59514412ce5c3b8a89531559a897126e0e4a
SSDEEP 192:sxZfbRjWX/f5smgIdpd4HW6+WNGY36b16Ig52J:sxZfbcX/f5smhOHbGX4s
TLSH
T18E22A5516E28A97B8CCBE209FA25BF53E6F9503251D11E58AAFCC61C05E66CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2198e250-d146-4543-bbd7-f78713a43396.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2198e250-d146-4543-bbd7-f78713a43396.tmp
Size 9KB
SHA256 a79190de2b2997be25d00d70ab3038e16d57d8e036cd78c5f33b2436d49fee02
MD5 e80d2511186f4249253d0a73b8cbb76d
SHA1 fd82b19b6f9093af5589f221451418b215ee5b18
SHA512 a1162dd8cdaa67e8b1e2c9f3af75ca8a2760ad8a7758cff1ea58fab0066760fa7eabdde9fe8832475dff1dc1481ddd8b53842033e013d01a9208da875b6df41c
SSDEEP 192:sxZfbRjWX/f5spgIdpd4HW6+WNGY36a16Ig5UJ:sxZfbcX/f5sphOHbGXv+
TLSH
T16022A6116E38A97B8CCBD219FA25BF53E6F95032A1D11E58AAFC861C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

574b9031-75fb-4528-881c-cef63ebfbc16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\574b9031-75fb-4528-881c-cef63ebfbc16.tmp
Size 10KB
SHA256 791b59488acf2c578532b3420d67cfa4e89f2ff11467f2ff356944c555950d75
MD5 9febb06e1ac379cc151bcd06d03025d5
SHA1 f4ae795309fb76e8cc13ee8ed10fd9e026aa2a16
SHA512 a0b45c5d453837a4b8835122aff3fd6001385e65040a831b1ef7f6aa6fd3d3299cd44f3e7612d8576edf41ff29393eb2d7fc6b59473dfe375a5b2896fc5fe535
SSDEEP 192:sxZfbRjWX/f5smgIdpH4HW6+WNGY36116Ig52J:sxZfbcX/f5smhYHbGXms
TLSH
T14222A6526E38A97B8CCBE219FA25BF53E6F9503251D11E48AAFCC61C05E66CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

732083a0-b2c4-432a-babc-3fba8526e0b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\732083a0-b2c4-432a-babc-3fba8526e0b7.tmp
Size 9KB
SHA256 1d19b4152404dc30b7c45d6db3ecb1941acd286c67ed7d2e117587c9b0a21a99
MD5 36ba5e37865cefa11809c97da955f617
SHA1 670b81d4147b5392df4dccc76efcde287f4e2471
SHA512 bed6c5f6d4aba24aa477b9270ee125eb7e2822ec02091ee88493d8db40c08ee804d9a1175d309e9a55d02f18ff9de5abfcd2eed658723ba23bae8ebec344d307
SSDEEP 192:sxZfbRjWX/f5s4gIdpd4HW6+WNGY36a16IgrJ:sxZfbcX/f5s4hOHbGXv9
TLSH
T1C712A6126E28A57B8CCBD21DFA25BF53E6F9503261D11E58AAFCC61C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82a9aa6c-031d-4085-9a02-88b1ba30d252.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82a9aa6c-031d-4085-9a02-88b1ba30d252.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9923e664d794ec20efc053c17ec53ae20af556769a0a32482e1ae2d5302079ae
MD5 33e96b362e0c78e29d1fe69962b10506
SHA1 7a9e8d63877061adb4201c6503f31a8b97544367
SHA512 a439b350d8a60548963a7f8ed66004abe3fab5c545ef4c6408a56f5e26147840dbe234a2af71786659f95ccac5bff8ab70565b07e158482cae6f50460f560eab
TLSH
T17561A5865590CC61FF6CC8F591F91F973672658019932EC165ACFCF668663C6D07213C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 949351b86ee8072ae260d7429872a7db2d2a28b0fecdd4801d44afa732e8ab40
MD5 f5a145bf1b77aea05a1d7d16a3c4056e
SHA1 8323de3d468d5fa9ad0b5065b387d15ea74102f1
SHA512 5a4d81ac1468c1abf4dbf2ce74b0f5fee1a33386ac97f6389a0cf2f8e56ed51455c78c622743058c09352e807cbb6754ae5cae9d144a2e41fea84dd0b9f5b308
TLSH
T12C61A4865580CC61FF6CC8F591F91F8B3A72A68019932EC165ACFCFA68663C6C07203C
MD5 SHA1 SHA512 TLSH

Submit Download

557b30d7-36b4-40c0-a238-be03e9670dff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\557b30d7-36b4-40c0-a238-be03e9670dff.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0345f9a9-f1fd-4f75-bf4f-8275353439de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0345f9a9-f1fd-4f75-bf4f-8275353439de.tmp
Size 949B
SHA256 1808f0b74c9faa4b08e50d2abc44afe954853b37411c7c7b5baaea234bd3f6d6
MD5 821f5abb611339096156a50b72acc323
SHA1 ecbd952011fb1dd6af56e6acf980edfc71afdab8
SHA512 271bd755ae61dc48a1e3df3099b57922c0c12966f9bdda137c3698069e92490120a4940661b5961313d69d6be98f330e7bce2adf5e70811547295280b656e5bd
TLSH
T12D117DB3C3D585AE890116F06A24AE1BCE1D0505421C7D19C5D4EF2B97E3076D10159B
MD5 SHA1 SHA512 TLSH

Submit Download

78a747a4-02b6-4dff-b9e3-80c64cd3e43e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78a747a4-02b6-4dff-b9e3-80c64cd3e43e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f6ded43c-6371-4182-b966-911796647de6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f6ded43c-6371-4182-b966-911796647de6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3050a67128a181cf934551d8f8e44915f905588ce57e1782e99ec81c1dc07def
MD5 91073b74484e7b3d4b39abf80c18ed51
SHA1 eee2b486600ad1fb80c24b04df588e5f402a748d
SHA512 1c7c909b3e1e1739994e384310a496fc5f8fab2d4129f6631a2e84749c03ea38e5d3d5c5dd4edf148abc871351266849c98f02f0716afc4e6de7c26077b425c1
SSDEEP 48:K07+/bldd+bNglIS7+K9L1J+xTuYIZrfyLMb6G02aDbqpyIS+DK9a8VyTPd/zjSx:KsIoKxiGGr+KwjyQKLaiuN+K4
TLSH
T1029145903A6B5350387E295545659A2F026170F33028BEBF7BBC91918E6FE044EFF5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a29e7452-10bc-4a7a-b50d-33a5a9a2723c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a29e7452-10bc-4a7a-b50d-33a5a9a2723c.tmp
Size 27KB
SHA256 2a512f6c49bdae01756a76562247420d1eb08af23cb42dc6e692ff9950ffdcfc
MD5 2f4a8f35ae1aaf383f61353d9f185078
SHA1 dd06cbd72618b1cfcfdcb3fc5b834ac79cdd86fd
SHA512 9aa6945823112037af461680cd483a21b9b93d87d433ffcc683296a9b068aff299edc9faac34f82712fde701480239dab74bbc49652e7ea01112dbc3b728380a
SSDEEP 768:c6Klm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/NroRN:c6Klm7QWvUYe0u1ja8/L/E/mRN
TLSH
T1D8C20B3B640CCB7E4FC05A9DDC5A6F976EA802C796588D404BFA984C02C77EE512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77310b8a-7ab9-4a94-aff4-469d756ff23a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\77310b8a-7ab9-4a94-aff4-469d756ff23a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9953114-1499-4151-9abd-e30f734b786f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b9953114-1499-4151-9abd-e30f734b786f.tmp
Size 18KB
SHA256 52b29c0527ea19ed18b99d6cbed8a0d71c7a85683b58dbfabd6b5c7a0b5e0294
MD5 40dec18a5df4de799ce4f7c7c76eec55
SHA1 29cbb311cf8fcab4a4a4869e148eaa5f18a423b8
SHA512 f3fb4ccdf79fe4c8e5b2331b39308cc7e04ee95ddb9ffe83e18dd1b48bf76a95f95aaeb71e9d5b1d1ec67633e8df2ddb9cab146114942391e867931cdd1f2399
SSDEEP 384:xZcIhsN4NuLMkbehbh//afVK8tgOIwZOyxLBoJ:Zh10MfN/CNK8XsWFW
TLSH
T11D828C36AC78ACB75CF7A145F04736035FB480A7A7C49F94D9EEAB2D01E91A81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a0632a1-9dc7-4f52-bb8d-4d15ad74eea1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0a0632a1-9dc7-4f52-bb8d-4d15ad74eea1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04e4e518866c2a6932dcd0ac490057c36ae51f2bb87174a1ff1bfa99a42f9807
MD5 66a7ff06f0174595c2c7a0a889600fb3
SHA1 f9cd80c9f9901bb4670aef95db6eb2af1ff61861
SHA512 e8990cd5635d8c78eb98f92b22d5b9436ea6c1d755872c26a8415fceb438cc256f906f6d3e2f6afb249052e843d1e9690c183524f39cb4981164023d6b75e5ac
TLSH
T1F9414A58B6FE1108B3B76F599FF6A86D483FB8772E0AD05D50110E4E0A22B01C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download