5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-exvbk7.htm
Size 1KB
Sample261002-vxjsfstycs
SHA256 5d6004c82e2d7244aad68bb00365d03353aa2ac2d87ec93b28b59b029543fde2
MD5 3a134f40128e3382caf68c7037564ce6
SHA1 d53f727b1b15ed1d2286e65613578331cb2a01f7
SHA512 7dc021062e3dd4f2601fa8291c6c7370bcb1b579bc09aac01ed304c2dfe255c0a67248a2e7b90940563d9c914749f0488d85f55208a5f48bf413f651b735d21e
TLSH
T1FD11CCDB03E23DA45493333764434B8EDF380175E7724F753475211A138A29AD4239F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1264	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{968F42BE-B26E-4ABF-8228-D0203F288128}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5668	msedge.exe
5668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe
1196	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 5116	1196	msedge.exe	86
PID 1196 wrote to memory of 1264	1196	msedge.exe	87
PID 1196 wrote to memory of 3832	1196	msedge.exe	88
PID 1196 wrote to memory of 3832	1196	msedge.exe	88
PID 1196 wrote to memory of 3832	1196	msedge.exe	88
PID 1196 wrote to memory of 2680	1196	msedge.exe	89
PID 1196 wrote to memory of 2680	1196	msedge.exe	89
PID 1196 wrote to memory of 3776	1196	msedge.exe	90
PID 1196 wrote to memory of 2152	1196	msedge.exe	91
PID 1196 wrote to memory of 3776	1196	msedge.exe	90
PID 1196 wrote to memory of 3776	1196	msedge.exe	90
PID 1196 wrote to memory of 2152	1196	msedge.exe	91
PID 1196 wrote to memory of 2152	1196	msedge.exe	91
PID 1196 wrote to memory of 2736	1196	msedge.exe	93
PID 1196 wrote to memory of 2736	1196	msedge.exe	93
PID 1196 wrote to memory of 2736	1196	msedge.exe	93
PID 1196 wrote to memory of 204	1196	msedge.exe	94
PID 1196 wrote to memory of 204	1196	msedge.exe	94
PID 1196 wrote to memory of 204	1196	msedge.exe	94
PID 1196 wrote to memory of 4688	1196	msedge.exe	102
PID 1196 wrote to memory of 4688	1196	msedge.exe	102
PID 1196 wrote to memory of 2268	1196	msedge.exe	103
PID 1196 wrote to memory of 2268	1196	msedge.exe	103
PID 1196 wrote to memory of 748	1196	msedge.exe	106
PID 1196 wrote to memory of 5636	1196	msedge.exe	118
PID 1196 wrote to memory of 5644	1196	msedge.exe	119
PID 1196 wrote to memory of 5652	1196	msedge.exe	120
PID 1196 wrote to memory of 4652	1196	msedge.exe	123
PID 1196 wrote to memory of 4652	1196	msedge.exe	123
PID 1196 wrote to memory of 2016	1196	msedge.exe	126
PID 1196 wrote to memory of 2016	1196	msedge.exe	126
PID 1196 wrote to memory of 5668	1196	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-exvbk7.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2e0,0x7ffaacdec188,0x7ffaacdec194,0x7ffaacdec1a0
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,15069171777624844233,10295381893990947940,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,15685696328642556476,4442090995880916032,262144 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,3755987247557140091,18298979558185523911,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15833552995634260296,8521377359961979745,2097152 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,9440967788345394040,14936704694402063244,2097152 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,9580662909080170982,5280889247612151982,2097152 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,4638460587459596703,17877474394612123941,2097152 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,14772247547175577025,8822584252258604218,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,8280552430528712174,5016014057505979206,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,2023310484347825755,16911230822827514753,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,2023310484347825755,16911230822827514753,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,1194819445460970549,9595208518342681503,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,5907122232331194196,16582006063881744698,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,15816155221435014912,9090595135083489064,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,10742476768599047261,8163608213060302966,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=1636 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,7596663914304637172,10355476272314431385,524288 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5312,i,14750474408887724851,12620374462346682313,262144 --field-trial-handle=2188,i,14646956304897295277,14813949859994893828,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5668

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

00a02d91-cf06-4c1b-8a9b-5ba44ff88b57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00a02d91-cf06-4c1b-8a9b-5ba44ff88b57.tmp
Size 8KB
SHA256 3f388058da43a94cfb5af0e2df19fb238030f9b0c74334583a2d43af27967ee5
MD5 db0969281281aaa8e31251b7970f896b
SHA1 b463f873b9a74a1fa10dcd9d82aa9e6d5fcc077c
SHA512 9c3954ff28d51d9a83fd6d5cccfc7cae21fbd170750b49ff8b77732177e85b2667065fe64e6955d91f30362e15608e23d8d58ef2d663436cc12935e3ac8e109f
SSDEEP 192:LONl6AmwpAQmiUyRCfsiX5F7wksFqwKPe6lRIqILU6:LONl6ipABfsiX5F71sFq7xWLU6
TLSH
T1AD122B36A87C6C7F4DD3A554F0473513AEB55227EB886F84D9EC2B2C02EB59C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b4df8ad-49fc-4ac3-83cf-17771baf505d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b4df8ad-49fc-4ac3-83cf-17771baf505d.tmp
Size 18KB
SHA256 7bd7d0b5557a5ab920002ea494271947286cffcf288b57b715b379691d729551
MD5 22c83f48ebe9b467b21154ff8ccd966e
SHA1 fa49332bd2ebad68bd58ba10d1a7b607f8f07f6f
SHA512 de376fbebb545d02cc8a6bccd87b10ed21a469ce5720372cc2eee841e7b922139e9b1f01c4a14869dbb60eafdb329e6aaae5d61e5299f705a1ef8dd84fe49468
SSDEEP 384:yZcIhsNM3NpuO299iX5F71sFq7eWLtgOIwZOy3Jo5:Ahhsja8nOXsca
TLSH
T18D827C329CB85C7B59E7A145F08B3603AFB89167E7D86F84D8FD6B2D02DA594030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43a4a0e5-36e9-4ff0-8e21-2f6cbb90f17e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43a4a0e5-36e9-4ff0-8e21-2f6cbb90f17e.tmp
Size 21KB
SHA256 2fd6e93f2b89fa2b2a53a0153b06bc1eadcbc77bb21473ab75bbbb1c2e394124
MD5 fb57d1bee9da740341710e6ef526d71f
SHA1 bc494b295910773f3f1dcb6271252482bfe37c97
SHA512 88d76d13b962bc503392a433b65f06d794b4549932fbebdf53a2f6a89c352d31dc0f664f967984ac13cb3a08beecf385fb1e1acda0b8a41166b708a7db2daf6f
SSDEEP 384:hiFiZcI6zsNE8TUNTUlIlWNpuO299iX5F71sFq7XWLtgOIwZOy3Jo5:IFQS9wgAsja88OXsca
TLSH
T1F7A27C338CA8897FADFB9A45F54A32039EB55167CAD4AF94E6ED5B2C01970D8030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

902798df-1356-4865-bfa5-3e3733df56a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\902798df-1356-4865-bfa5-3e3733df56a0.tmp
Size 8KB
SHA256 a116625c6f9cc2f58be9ba2df500de80903d5f2b842a8ff2c628f22a4d989ff4
MD5 49bc2bfd1e3dce47ad2133ce25bcc958
SHA1 f1be1703526232ed1d2cbc1b7f45ed2abc842d50
SHA512 d0ef7f35425ba51f48068a39e4a67a9d1b8ad7dec41f114fe1e38275f329b1a3bd6b2526e8a752cab56e85ba13d26ae7cd2001eb34a6b9f9a092f6426f48be83
SSDEEP 192:LON/6AmwprQmiUyAC6siX5F7wksF+JibpU6:LON/6ipdW6siX5F71sFrlU6
TLSH
T1C002F935BD686C7B8EE3AE45F44B3713AFA5116BEA902F84C9E81B2C01D765C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

0093d262-adb6-43d6-9fc4-5c75fac23524.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0093d262-adb6-43d6-9fc4-5c75fac23524.tmp
Size 10KB
SHA256 17e2dfcc7a43454a089688ff405eccfe34354b709fae26d41f4d817a062a8329
MD5 97fb321ae709dea121edb4266159b4b4
SHA1 b37089a3507419335858d8366c33b7a80b223e3d
SHA512 c0446ca46d3b469465619e5ec6bd14391b5cd8fb6d7a67b8398d0fb3922aa0a60902c02fed69d8c587fc553f3717dc6613f09ff88f1be7911ce2a53ef5d26ff2
SSDEEP 192:sxZtRKWW/f7sVtIdpdYHW6+WNGY3FD6Ig5xJ:sxZtPW/f7sVOmHbG1x
TLSH
T10722A6126E28697B8CCBE20DFB55BF53E6F9503251951E58AAFC861C05E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d14aa14-702e-4a0e-b277-35cbc0c8412b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7d14aa14-702e-4a0e-b277-35cbc0c8412b.tmp
Size 10KB
SHA256 0d30c7ecc71da4e06c380889ed0062f65a561808e0847900f070e03bb2ef637b
MD5 72df8074d6c5e5d2b95effeee3fc4bc1
SHA1 c142f094ec6f02e38c716d84bf54163f9bfdd7dc
SHA512 a56f3c885429cc5ed9a15755e62d79af2a2d2e501d8cf96eea02f71743641e1ec81da0a3125758c252f36cd139eb3dcbfebdf66ff30935231fceda5e8ffabb2f
SSDEEP 192:sxZtRKWW/f7sVtIdpHYHW6+WNGY3AD6Ig5xJ:sxZtPW/f7sVO4HbGyx
TLSH
T11622B6126E28697B8CCBE21DFB55BF53E6F9503251951E48AAFC861C05E7ACE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 de77670fabe81ce634e0630ac1f319274d934a889aa4c07c1649f3f83db7f098
MD5 7cbc0606d0ec96b1db881637e97eca1f
SHA1 2e6439fda43ca0ce4167160836071a4c8f100514
SHA512 6e60a43e80670753535364c2512f584888a8a2613c983177a7dc040244a83816d0f2869df7188f2212025796f0270814c3688d7b776c887923b695fdea33cd5c
TLSH
T199E026E484C8DB2EB608B48B0368730CD3A0361BA6C0699E2B04C989BD45544E686EA8
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0e77e009c69805fc55559b04e1df081411b1afa59aecdf5a9b0e472cd941909e
MD5 fa7eea672a009fad06614b49b6f71ddf
SHA1 b4f2691e14747376f306cdc80a2b2587ae2b7442
SHA512 4937d223e7ff8db6d4f0b5963025ed85723592ca96b6c61d7b9b46c12bfcb2362de8a9a5f69a4b9088f6856b5505d6939334e84e2ee36a15f5049cc67c8cb574
TLSH
T132614F8F46D9C867FBF896B296F5938236F8A6825B431DC131E4D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 98b484b5d7dacfc2e72388a0789226423c10830add51e7200a870a23931bade2
MD5 94ee327d0616a7bb1dc9e2fb50ef62af
SHA1 ebe0d52612bb82fe77188d5fc4c0ad0971fbfa68
SHA512 221ffb6162d79c29cb54e0936cef38fc46991d1bb84d9628e1d5acb664953244233c679161cd2c8c2f4390f96077b532ae9780e4b6f0bb8b2e99d24bda77a448
TLSH
T117614F8F46D8C867FBF895B296F5938336F8A6825B431DC130E8D879D82EB53F149200
MD5 SHA1 SHA512 TLSH

Submit Download

efd3d5b6-61e8-435c-bb2c-df25197384e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\efd3d5b6-61e8-435c-bb2c-df25197384e7.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f9ba492-fbd9-4727-a48d-e4892910020e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8f9ba492-fbd9-4727-a48d-e4892910020e.tmp
Size 733B
SHA256 8c28750d116a06003443855621e0c57fcf5f6091371cfecd2b05b6b93d298f5e
MD5 12d013249cc85453274b6ba4b9d22914
SHA1 de525383bb77689855b53958fa26996df8fe61d3
SHA512 38b31faffcf61f52df0ecac5a4170181f9abc7e7deba593aa797947031a06eca77b51d703ae024575b985da29c7323ce1955f94a9980b6e92f614e1d58b33d72
TLSH
T1FB019CF3C3E495AE8A0056F06A18AE2BCE2C0906431C7C5AC5D4BE2BD3E34B5E00199F
MD5 SHA1 SHA512 TLSH

Submit Download

ac22edb7-d18c-4806-940a-dd5d03f55dcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ac22edb7-d18c-4806-940a-dd5d03f55dcb.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e2d8e68c-d976-4c76-bcb5-98d9290ce275.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e2d8e68c-d976-4c76-bcb5-98d9290ce275.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 64806eb5853e9c5d0ea3e49b41dccad82dd86f9999d9f252413007dd4afc7dcc
MD5 82b700c0be8facd5e1d2486057b15ff0
SHA1 d7b1427be16dbdf5099e49bc5157100d8ea5904b
SHA512 c5e2fec36a44b51deef009f966d5e8f5a7439b79cb754c8d0eaf727fab34d42f9acddeb2959d03b383b35e1c20790ea07cb607d4027846ad520b9f4f29a37fa8
SSDEEP 192:sxZtRKWW/f7sUtIdpdYHW6+WNGY3RD6Ig5jJ:sxZtPW/f7sUOmHbGfv
TLSH
T1EE22A5126E28A97B8CCBD20DFB65BF53E6F9503251D41E48AAFC861C05E66CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8af632d-f29f-4b97-a51a-42414fe859b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8af632d-f29f-4b97-a51a-42414fe859b6.tmp
Size 27KB
SHA256 746be54e9eed981f034457d4f0a4ade4211b38b5469238edbd505401134320cd
MD5 e87f32a04e9d024b9e1d7768b6d403f9
SHA1 49f25e6666fb45d4f3cf040bf7dcb7ee14e5f949
SHA512 3db7b87718bdd9bf1a12974c75c2a4b464b543fa2cbcad79569ef81fcaadd10e17a0f4fbc64ae0a29264a306fa17965e6b0deeff14f2372c3062baf62b43d85d
SSDEEP 768:c830AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ723rolZM6:c830AbSWvS2l9u1jaLmLZ12kx
TLSH
T127C2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796548D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceb3f5a9-f5a1-45d5-ae9a-49f68514bd67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ceb3f5a9-f5a1-45d5-ae9a-49f68514bd67.tmp
Size 9KB
SHA256 75ca30df60b3e0bbf4a878cb34c6cef873d8046b1d5f774df24d4980f439c90f
MD5 5a033bf5dd6a15cc60d1476956c62ef6
SHA1 551891dc475bf818f8e88723900d30ad5deac5dc
SHA512 ab283f1739c2d4696e999963a6eb1b11324cf5186584db0ee6f62dbe2fdb2651224eb775789c80452437d5880b4c277734fb24c6d603c9ce95bb6a461cb97956
SSDEEP 192:sxZtRKWW/f7sWtIdpdYHW6+WNGY3RD6IgrJ:sxZtPW/f7sWOmHbGf9
TLSH
T11812A6126E28A97B8CCBD20DFB65BF53E6F9503251D01E58AAFC861C05E66DD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a4af578c-9965-4243-aa8f-c7df1bf740a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a4af578c-9965-4243-aa8f-c7df1bf740a6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

996ce1da-4d55-4f87-a7af-f6f5b40d7d75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\996ce1da-4d55-4f87-a7af-f6f5b40d7d75.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fcad86dc-6992-47c0-944b-7619553db45f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fcad86dc-6992-47c0-944b-7619553db45f.tmp
Size 18KB
SHA256 8aa1839e755affa00830dc797dccf7607b7e4f09e358291cc384fde446493517
MD5 83f98b50c27f3e85d25436e5a5ebcfc9
SHA1 e69e7691cc6612f7fa6e572267d07b6954842039
SHA512 74d7e6921a9f3ce1bd02d537923421d33d2db8a8adcbd146849e03359fc393108b19ceda441fa82584249cd80932a698bf99605fb692979f1630d7ed5c883698
SSDEEP 384:cZcIhsNMWNpuO299iX5F71sFq7eWLtgOIwZOy3Jo5:Khysja8nOXsca
TLSH
T1F3828D3298B85C7B59E7A145F08B3603AFB89067D7D86F84D9FD6B2D02DA594030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b08f85251cb13a4cb7968a068749ca439b53a705ca55b6e937aeb4fae4bcd24d
MD5 cb59ddfbe9f1ce278266e28f72efbfc2
SHA1 acac01b29f612ef1f209929369a2605526fcfe58
SHA512 6cd56a3d92c6c36947fa1b7b7f0c1b51825e77a4fee0d0882ba2a020417194a2ff6a45fe9cd9a3736229af507a7a0bff58a93724a86509e4d8751cf822802bfd
TLSH
T14E412B98A6FA1144B3B76F5AABF7682D447F7D731E07D46E10510E4F0A22A00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download