5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-812842-hiizhm.htm
Size 194B
Sample261002-ysdmeszcpg
SHA256 5dfa57bf10f02106e404ffb38bc5b2da62eb96b9b02b74d10f1b472a89e6ee5b
MD5 0fe53cf75ee2569670f22b4df68cfdff
SHA1 c8ce77fbd6e13476239c598378c612a8b57685c0
SHA512 ee321ac4703144eafd3d4db7deefe08d8aef572e3c67fc9d4203f5349646173caadf91608fd10220a16ea91099657c4a8460e3ca09a781af646cb3a5282db660
TLSH
T121C0C0B7E400620CDB3078D500F172CC00F8819C9C82CA003D8018E8B39696AC9031D1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1252	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{42315FB8-DB14-4CC6-B383-D66287D6B9EF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe
868	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 868 wrote to memory of 4288	868	msedge.exe	87
PID 868 wrote to memory of 1252	868	msedge.exe	88
PID 868 wrote to memory of 4248	868	msedge.exe	89
PID 868 wrote to memory of 4248	868	msedge.exe	89
PID 868 wrote to memory of 4248	868	msedge.exe	89
PID 868 wrote to memory of 512	868	msedge.exe	90
PID 868 wrote to memory of 512	868	msedge.exe	90
PID 868 wrote to memory of 4960	868	msedge.exe	91
PID 868 wrote to memory of 4960	868	msedge.exe	91
PID 868 wrote to memory of 4960	868	msedge.exe	91
PID 868 wrote to memory of 1124	868	msedge.exe	92
PID 868 wrote to memory of 1124	868	msedge.exe	92
PID 868 wrote to memory of 1124	868	msedge.exe	92
PID 868 wrote to memory of 2904	868	msedge.exe	94
PID 868 wrote to memory of 2716	868	msedge.exe	95
PID 868 wrote to memory of 2904	868	msedge.exe	94
PID 868 wrote to memory of 2904	868	msedge.exe	94
PID 868 wrote to memory of 2716	868	msedge.exe	95
PID 868 wrote to memory of 2716	868	msedge.exe	95
PID 868 wrote to memory of 4292	868	msedge.exe	101
PID 868 wrote to memory of 1000	868	msedge.exe	102
PID 868 wrote to memory of 4292	868	msedge.exe	101
PID 868 wrote to memory of 1000	868	msedge.exe	102
PID 868 wrote to memory of 1376	868	msedge.exe	106
PID 868 wrote to memory of 1028	868	msedge.exe	113
PID 868 wrote to memory of 2888	868	msedge.exe	114
PID 868 wrote to memory of 2000	868	msedge.exe	115
PID 868 wrote to memory of 4524	868	msedge.exe	124
PID 868 wrote to memory of 4524	868	msedge.exe	124
PID 868 wrote to memory of 1628	868	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\attachment20261002-812842-hiizhm.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa7632c188,0x7ffa7632c194,0x7ffa7632c1a0
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,10286498314108658493,4388587295388583369,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,15509739964858894018,9555483580770861187,262144 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,4769891352825635970,7901687692399746526,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:8
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10439480333415049541,5721919310769654439,2097152 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3206452996472215943,9603033846797268620,2097152 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,4818880833213939976,9521241425703369964,2097152 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,14331252497164855621,6381098729477662383,2097152 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,503145342652413056,2036650493126760308,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16494572462396436764,2708298966557151227,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7119792738391308,12407643468219048357,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,7119792738391308,12407643468219048357,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,10005994517231436886,609818419330516815,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,4404967562645465921,12023019222349937003,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,17762013448612580564,12841430373516434468,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,2571321256321324893,17281274854433902351,524288 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6040,i,9312884578871253526,7183125141892524119,262144 --field-trial-handle=2312,i,12548027175208445732,11736534902953631384,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

415b1ae1-12ea-45b9-86be-5f499249da47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\415b1ae1-12ea-45b9-86be-5f499249da47.tmp
Size 18KB
SHA256 28abbf6f0c9235e27d20b8682bdd14a309be3474c935dabf7147cb66ce0c55e6
MD5 4370a5ad40523b65c790f867f0839b3d
SHA1 67c4bea9afe94eec3c2f908df70bb4d6990ace46
SHA512 484faf36e956f490194f333fbf5c11448c100f11458a8e07fdb955fe2102e02a1cf18299bc125fbc61f4e70afef395c7703df41063cd3385c2c51a3bb53525d1
SSDEEP 384:z7ZcIhsNT9wbRPK5OjTVY9di9rO8VZh6DKhHT/og:zjh5w0nSj8fYGHT/3
TLSH
T147827E329C782C775DF7A542F5463603CFF891A7DA866B8090ED9F0E01DA6A82317D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54ff5698-7a7a-4a81-b84a-e2400d31f778.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\54ff5698-7a7a-4a81-b84a-e2400d31f778.tmp
Size 8KB
SHA256 76d0ed1d11a8b237cdd5645d65c69a42994af27ac0b03abe5269149b7dfa19ff
MD5 c8fbc3984f2d150cd7cfd96dc2f36d00
SHA1 4a4309a1286ade86f247746fefbb5b6a0f224eae
SHA512 86c327a2c164f133c9cf4c34f2a945c418a5b4787fcf9dc50e417a20426260b9e22744af2e44df18089a8731499050c8abccc17e6ff53efaf0b82c764553e41f
SSDEEP 192:SONu6yQQmiUyBm7OCTVgLi+FdVs9mQNU3UxqVU6:SONu6XH7OCTVY9di9rZ8U6
TLSH
T11612F836A8786C7B4EA36541F08732139FA48267DE867F90E5EC5F1C01DB6AC2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bcb729c-a9a4-42a6-8757-a832f25111bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5bcb729c-a9a4-42a6-8757-a832f25111bb.tmp
Size 8KB
SHA256 f079dd6b7378d7e8d2dccad87df948fa4ed2fbd0f604ab667bfeb2c36f8cc2b3
MD5 40df08348dee0f4e33a53aaea6b697ce
SHA1 dc933558a88af4f0d4146f6a6bef59c1badd4512
SHA512 ecae3d7af59e079604915ecab3f703c405b6791877d700ade9da6ab77df812619b46a16694d6f23285f657bfc33f82c0d5818ecd58b3964c493d13b5aae5812c
SSDEEP 192:SON06ygpQmiUyZmtOCTVgLi+FdVsLzPvVU6:SON06lH1tOCTVY9diPtU6
TLSH
T1D702D735AC782CB78EB3AE46F48737179FA4117BDA562B84D9E85E1C00D766C2343932
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c396163-dccb-4cca-89de-29c42407ea7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c396163-dccb-4cca-89de-29c42407ea7b.tmp
Size 21KB
SHA256 c0c464f48169f79d596366b18dd5ce65d7b8e924f52ac2749acaffc06808b4a7
MD5 169c4c35db05014faaccd23a5624158f
SHA1 93c2714a1e381f72eb51ed1d4471a4016378b9d6
SHA512 54fa3a91df6316386078a2c6a6fb509a11ed41e48bb8b71f060b3e9daba1cee3905ab44d4bc5c3293858855209788e498d9c3786f4182f8238ec9ad994468356
SSDEEP 384:hziFiZcIrzsNt8TUNTUlIl+wbRPK5OjTVY9di9rY8VZh6DKhHT/og:heFQ/8wg1w0nSn8fYGHT/3
TLSH
T171A26C738C685D7B9DB7AB42F54A3603CFF481A7C986AA90E2DC9F0D01962E82307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

243bb3c3-449c-443f-bfcf-4a03152ad49c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\243bb3c3-449c-443f-bfcf-4a03152ad49c.tmp
Size 10KB
SHA256 296a0df8eb4ab0b870cdf075568f8bc5ab5471c5410b41e9262398e963a8f3ef
MD5 554536f93a33e8639fe1b588e54ed578
SHA1 82e240e44c27fecd988a202f32a38f8baf4bc0f0
SHA512 b5f3de3b784562138eab1501cbceee682c01c3f129c0790204984bf5e0fb83436a2028ae138753e3ab5ee0d8e5ed2b44145e2662b9ddd47b308bdbef23b04dc9
SSDEEP 192:sxZrREWy/fHs5hIdpdxHW6+WNGYRPjjqIg5GJ:sxZrty/fHs5KHHbGmKo
TLSH
T11922B7526E28A97B8CCBE21DBB25BF53E6F9503261D11E58A6FC861C05E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2448a2ca-ecb3-4c4e-a48c-0225f4dcf8d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2448a2ca-ecb3-4c4e-a48c-0225f4dcf8d3.tmp
Size 9KB
SHA256 eeda583a432bb75b0f77ee5af3bdec450d424fd33113d57ffaeeb920be12ddae
MD5 2518f9de48add58afcffe925a597ddf1
SHA1 c614eeeced25629ec0b2921e1e3932ef10b66b5e
SHA512 6b4d8130ddb1654e1fd72980a70da73adcd8dbfb5822dc80256f3976b6cc3524ea833ddda61790a518b1afbf969c8353f50c6011f839d74e615eb0f7f4cb1304
SSDEEP 192:sxZrREWy/fHsShIdpdxHW6+WNGYRPRjqIgrJ:sxZrty/fHsSKHHbGmA9
TLSH
T1B612A7526E28A57B8CCBE21DBB25BF53D6F95032A1D11E58EAFC861C05E66CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

746c7a30-39ef-4ea9-8ebc-2da061c9c832.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\746c7a30-39ef-4ea9-8ebc-2da061c9c832.tmp
Size 27KB
SHA256 00aec5c795bb0cbc5cb8ac2b98e375833226bb0f0aca11143d78181794971533
MD5 c042697fb7f6d9d42f3074591f0187dc
SHA1 0574f98d9dcbe1409f33f7bcbfd18e320d301dfb
SHA512 f0a40a39595be897ba5049eefdade61bfbd7e654705591c5e43113b142838a459c0626a6a9f694955a648a8b868c6a600f767b3a7d526effb269235432ce9a8f
SSDEEP 768:Y6K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k33roX+g4:Y6K9uzYWvcQWsu1ja0HL7Q3kX+g4
TLSH
T146C2F93F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

751bba44-cfb1-4048-979e-2b7a4ea35fb3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\751bba44-cfb1-4048-979e-2b7a4ea35fb3.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 fff4ab8ee59dd42de27ceac0a81f737fb844bf19f006a752d618d0babae3ca96
MD5 d076c9f86e0eb928878b03d9c9812bbe
SHA1 df2c7456f33685fd8a346ffb22766513200471ef
SHA512 ff059831bae2989903832ecbc56fc9554a75f648120cf397d81b00659f8aa2ccc96cb9717a2e0d33d8369057cc3dfff7865898e290fcd6d6a317af1b958bbb12
TLSH
T12361934465A07B9CFF68873798D42D8B7F344DF31A835F690868D87A66CB37550E03A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1584a6c8a923d9dbca3ce21f4fbcafe217c69ea5f11bfa788f95e3a58a5fe104
MD5 a75bcb28a207c77e872c3d18e98f99c7
SHA1 fbfc8b682c7fd1e424f8967e78b3b59323de98c9
SHA512 baccd2425ef3e8b0f5a403f6c0cb50b982c0d2575707064061f9528356a285143d4d2a968adc9561a7c597f2c0a0b8b0c2a3868e0be9192b243157666922affd
TLSH
T1A161934465A07B9CFF68873398D42D8B7F344DF319835F690868D87A6ACB37550E03A8
MD5 SHA1 SHA512 TLSH

Submit Download

df828300-afb0-4871-85e3-84e68b9f4240.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\df828300-afb0-4871-85e3-84e68b9f4240.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1044fd60-ae74-4e26-9974-4105b849a90b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1044fd60-ae74-4e26-9974-4105b849a90b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a1ba9059-7c19-4c58-b259-d1686e9faa48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a1ba9059-7c19-4c58-b259-d1686e9faa48.tmp
Size 949B
SHA256 862006b22090d4ac3d50eada9d870466a8214b7d6bea4af9dda7402f3674c0bc
MD5 22812c97df7a43fda98fb72280bacd6f
SHA1 38d38b71c5dd45b3f452ccd58763e532a7a7c387
SHA512 e0192cd741db15f27fba3f22745de3c5945c8a1cb9e2666e003df9fdeb726bc0b2131e34ccf2354ab289eef631f96ee8b951d6698b295b1e99f9b9c6be797f33
TLSH
T199117DF3C3D585AE890516F05A24AE2BCE2D0605421C7D1985D4EF2797F3076D00159F
MD5 SHA1 SHA512 TLSH

Submit Download

f7f468cf-efa6-4e9c-87e4-e91ef6662204.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f7f468cf-efa6-4e9c-87e4-e91ef6662204.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 25c62fedba27fe8eb8c34e2cc861493b12e6b7566d2b7d480d53ad6b99e74ee6
MD5 8d2ae34f0da5cb96844412266026caae
SHA1 9f666a998d586725b7b5a72f4b71a446199ab669
SHA512 a0bb4f53f5cda3145b4e06f2ef723aee09ca5f56eb49ae19296bd7d2b696e2cc875bcbeefe7ebe9c6534184b4a9c6ab8ae21f0c60362b19222556923f657c444
SSDEEP 96:K0m5owKVmK3/yR1/hBx8VssaNxKC4afxeXvkNEVOK+Il:hr3/yR1/hBeVsRND4afUXvkNnA
TLSH
T17091FF1136BB161079BD291884B58B1B529132B33418E66F3FFD44A14E6BF088EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac0ea656-5756-46ee-b7ca-46af8a402bb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac0ea656-5756-46ee-b7ca-46af8a402bb8.tmp
Size 9KB
SHA256 c7d64d58aaac7c4b189774ea2b831b4461db82b800402738bbd7c3b1bba8c577
MD5 9a4b93df075d0f64b58f54834737d39f
SHA1 18693bc87a3414e8b5f05bc66b47466310ddcde8
SHA512 4023dcce8767f142f543f9aa420fe3332d297671d9e08f4cde9ecf2d39f5f1e68a40c932adb6e9377d5195108ad26c561d0c6b7838dbd94f344d2f0d04b4d5a4
SSDEEP 192:sxZrREWy/fHsvhIdpdxHW6+WNGYRPRjqIg5kJ:sxZrty/fHsvKHHbGmAa
TLSH
T1A122B7526E38A97B8CCBD21DBB25BF53D6F95032A1D11E58AAFC861C05E66CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d972cbe0-26b9-47dd-a2d0-5366ed17d523.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d972cbe0-26b9-47dd-a2d0-5366ed17d523.tmp
Size 10KB
SHA256 362a3a0c5d27a129f162ba689802ce2e45706c4b5c79c67257a2a7965a46f67d
MD5 cb5c90ab7b9db988ce285b00ab4fd4fd
SHA1 26edf5785a346e5f42ff6d0314438e423c01db4d
SHA512 5124e27579ce8c8181f6bbcbf732532920c0cc4553a671515963ed44886c1d991005aa53ef21690a43c4aa8c3b37d9024993dacb6b9b9877775b73780cb5e02f
SSDEEP 192:sxZrREWy/fHs5hIdpHxHW6+WNGYRPfjqIg5GJ:sxZrty/fHs5KRHbGmOo
TLSH
T17322B8526E28697B8CCBE21DFB25BF53E6F9503265D11E48A6FC861C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ee13c0ea-4b05-4a8b-b998-fcb76b07b6d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ee13c0ea-4b05-4a8b-b998-fcb76b07b6d4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8298425-78c6-4653-9d3a-a951f37bcf12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b8298425-78c6-4653-9d3a-a951f37bcf12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

faf5214b-e08b-4593-be8b-1b16d890076b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\faf5214b-e08b-4593-be8b-1b16d890076b.tmp
Size 18KB
SHA256 5106fbb0c1442f3ba55a839a2eb96d61c8f7a60b6b79cc46b05550265f96595f
MD5 386d9cc5cefaa881982e1208bcd1f3ba
SHA1 5054ffec5366747e445affe6a41b3285dd9c44e8
SHA512 1419dd5ab3c16e62de5fcd85d60f5a51f3b0380bb793e61c3701416ad0d81249441197d4bc6c19c0ac44b40ab549c08400e43400874568a27fb994d0f7b2b960
SSDEEP 384:p7ZcIhsNT+wbRPK5OjTVY9di9rO8VZh6DKhHT/og:pjhCw0nSj8fYGHT/3
TLSH
T1F5828E729C782C775DF7A542F5463603CFF891A7DA866B8090ECDF0E01DA6A82317D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a44441e6535edf7a7ce04cc30900f9d9879f5c3ea1d99a51269a32e52c19134b
MD5 6ac2575e015fe4ad3b1047e4cf4ac02a
SHA1 14d70f79120f828f1b92d81f5f6be2d74680851d
SHA512 b97023adaafd65914a87e34ff79bdd84f191a706030192583e876d6be1e38aed377dd993f5dd0e0f20a24bf0804bf373f8fdab9e27557b7134fd99945adf2eca
TLSH
T14E411A58A6FA1148B3776E5A9BF6A46D847E7C672E06D49E10110E4E0A27F40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download