ca7d0d2c52748b6a2bd8185d5125a420333adbfbc02dffcaa82a1dceabc90a7f

Analysis

user interaction
yes
max time kernel
148s
max time network
138s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
03/10/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
404.html
Size 39KB
Sample261003-sdr9da1dmc
SHA256 ca7d0d2c52748b6a2bd8185d5125a420333adbfbc02dffcaa82a1dceabc90a7f
MD5 604defb2b5c9329ca796f90a9cf3ba4f
SHA1 7075e5fef18731f168dbf0b33a3c522542b58de9
SHA512 911450f2a03daa1f358475f143cea6b4ea2fe96dda9ad05cb0703145cbb3e51c9943fafad17e74fce829af105e0035dc6ed33c4618accf9cdc57a97d2964680c
SSDEEP 384:Pq6qTREa/B5tinMIn6zpC9/8txQiA6wyg97tQfRdrAiCQex8kj8rM8NJ4SRpE7gr:C6qTREMB5tsMIn6zNrJ1sgr
TLSH
T1070363B2083AD01896878DE231CEAA17B81ED036D57B9496F61C4CDC8FE786747B2735
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4092	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-686476835-2493921010-524562731-1000\{F7273246-8526-40A1-A27B-A1956CC76770}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
228	msedge.exe
228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe
1836	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1836 wrote to memory of 3332	1836	msedge.exe	85
PID 1836 wrote to memory of 4092	1836	msedge.exe	86
PID 1836 wrote to memory of 1816	1836	msedge.exe	87
PID 1836 wrote to memory of 1928	1836	msedge.exe	88
PID 1836 wrote to memory of 1816	1836	msedge.exe	87
PID 1836 wrote to memory of 1816	1836	msedge.exe	87
PID 1836 wrote to memory of 1928	1836	msedge.exe	88
PID 1836 wrote to memory of 2312	1836	msedge.exe	90
PID 1836 wrote to memory of 2312	1836	msedge.exe	90
PID 1836 wrote to memory of 424	1836	msedge.exe	91
PID 1836 wrote to memory of 2312	1836	msedge.exe	90
PID 1836 wrote to memory of 424	1836	msedge.exe	91
PID 1836 wrote to memory of 424	1836	msedge.exe	91
PID 1836 wrote to memory of 3128	1836	msedge.exe	92
PID 1836 wrote to memory of 3128	1836	msedge.exe	92
PID 1836 wrote to memory of 3128	1836	msedge.exe	92
PID 1836 wrote to memory of 4688	1836	msedge.exe	93
PID 1836 wrote to memory of 4688	1836	msedge.exe	93
PID 1836 wrote to memory of 4688	1836	msedge.exe	93
PID 1836 wrote to memory of 1772	1836	msedge.exe	97
PID 1836 wrote to memory of 1772	1836	msedge.exe	97
PID 1836 wrote to memory of 1396	1836	msedge.exe	98
PID 1836 wrote to memory of 1396	1836	msedge.exe	98
PID 1836 wrote to memory of 4796	1836	msedge.exe	100
PID 1836 wrote to memory of 4652	1836	msedge.exe	111
PID 1836 wrote to memory of 4120	1836	msedge.exe	112
PID 1836 wrote to memory of 4156	1836	msedge.exe	113
PID 1836 wrote to memory of 2276	1836	msedge.exe	114
PID 1836 wrote to memory of 2276	1836	msedge.exe	114
PID 1836 wrote to memory of 228	1836	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\404.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffa9d9fc188,0x7ffa9d9fc194,0x7ffa9d9fc1a0
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,12707763632545311039,6309372107254008157,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1788,i,18387023383389607735,10477573537746763606,262144 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,10055367195995204620,1903973237191286159,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16755512357503971375,12155134006181315080,2097152 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,7038570364276811608,4859631713000365116,2097152 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,6481542171556202359,851170708730608049,2097152 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,4730478124394480945,1786396499399735567,2097152 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17610449381105418806,9232142178624427873,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,1075574352257365940,401998283314564483,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2024106664785276063,15123434527182800395,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2024106664785276063,15123434527182800395,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,7420012172728602816,5281806091299582235,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,3223137370377589243,3756078628047488649,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,18254362688192700477,8482581352212593749,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,13038514144657631235,16608034468812702197,524288 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6060,i,18054594147487916647,3226792287668733800,262144 --field-trial-handle=2944,i,5917682946438218618,15598577541987143071,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3081f7fc-ee8c-4379-89dd-deaf8d570a34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3081f7fc-ee8c-4379-89dd-deaf8d570a34.tmp
Size 8KB
SHA256 7650463e167bd1f169ca4bf9f9c78bb91c70e26d7f06408736a13c611f20393c
MD5 ff57ceee15a6d731fccc7e3b92faedb7
SHA1 574ab328686bfecb2ec6dbdb532bfd89b8d087cf
SHA512 e4b18c574b00901e0984099b29b1d859dbe21580fdb3bebad6981c8693158e3e6d823746409d49d5de51b0c4d716b1b7c2c2a569ebcb63a03a1bf4437af687ef
SSDEEP 192:ZON26xGzQmiUyXIKV8WD0hZ/1vEIjzod+XZmXiK231qgU6:ZON26Ul2IKmWD0hZBEQU+JmX+5U6
TLSH
T11212FB32A868AC675DE27545B08735134EA45127EB89BB90D6EC2E1C01DF6AC131ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b62be70-6849-4741-96fb-202b3facdfcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b62be70-6849-4741-96fb-202b3facdfcf.tmp
Size 18KB
SHA256 13c4979bae322265adce6a33ac7b0277185fe964e5fdb2c9eda55dfac5b40f92
MD5 9d441a05fb96118dc4540c5890b7c0e4
SHA1 a74be27649de569e50aecf33039eaa6e0ff68000
SHA512 65b607a568082cfbd98a84d2ffc79290a67722b436b8b01635544cb119dd94418347c9fd804bcaf81ba161145c440d7bf5c6fb029096c12b1d4d40b719348c8d
SSDEEP 384:8ZcIhsNLkZQ8DiwQPxUKX54S0hZBEQU+JmXm5VZh6DKhHjXoh:qhjiTP5Z05ErQGm5fYGHjXG
TLSH
T1AD827D72AC389C775CF6B285F48726038EB49027D7886B84D1ED6F1D01DB6A9231BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84616f45-7600-4bd8-817f-7101cf0f40a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\84616f45-7600-4bd8-817f-7101cf0f40a0.tmp
Size 8KB
SHA256 48ca30433bd57b0f3fdb3bb56ef8401198439cab6a9b8520f8dba0212fcb3f39
MD5 3d76a7a8ffefb0e224e8c3144937b89a
SHA1 bbccc135ec30c3071aa16bc899c8db800576d351
SHA512 b43589a028cfb40bab6a4ffeac742e383a69a8b64df6593da6486fc179fc14d0f2551d532fbd8c1faf25a6d66eb51c13411131fde697d5fc01d61518634820b0
SSDEEP 192:ZONp6xGuQmiUyXO81D0hZ/1vEIjzod+XxicUNU6:ZONp6Uq2B1D0hZBEQU+FcU6
TLSH
T1F802F835BC686CBB8EF27E05B08B26174FD8213BE6956F84D6E81E1D01C769C130A837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bccf368-c7af-4b1a-9c78-6582183659f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8bccf368-c7af-4b1a-9c78-6582183659f1.tmp
Size 18KB
SHA256 5a4097a4cb7c2762857d9519090e4ec5b75549e13f5fe58f5bef034a8c38baf5
MD5 fa7c02b70c5969bd88a8921981efbb82
SHA1 9d947f04b4336641f8304255a9a7eb3dc495d2f9
SHA512 120f7187e2d0c919e2300c9e609701dbff7f211fb2531c1f58245b2024a520d967ecae892d1e4444909920b92a8eb2c98978ac99380ee2a668e613e08339955c
SSDEEP 384:SZcIhsNLk4Q8DiwQPxUKX54S0hZBEQU+JmXm5VZh6DKhHjXoh:ghoiTP5Z05ErQGm5fYGHjXG
TLSH
T194827D72AC389C775CF6B285F48726038EB49027D788AB84D1ED6F1D01DB6A9131BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8dd905d2-0fd1-4b91-a64c-82166750dcfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\8dd905d2-0fd1-4b91-a64c-82166750dcfd.tmp
Size 105KB
SHA256 b83cbf64cc348bda7418cf4d51290f954f1a229bfc174076604c71e6316695b1
MD5 e74d8b44e8d40662fd1b1b255738f7f7
SHA1 274571a893d99afe45f887bf62213edcdf6ce25a
SHA512 fdd52b8ff528e9564308a28f53b7774dc738711d7dccce592af97c88bf2722ddb380e7bf76101bce36a685c115e53c6bb3d415de6eecc3c382b674f304fb5a40
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7j:fwUQC5VwBIiElEd2K57P7j
TLSH
T1B2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d689794363e91be4e3d40432af9279354599c0ed54686304040d6a59b7db7829
MD5 e58de714840f6fbee1d39b033a0ecbc4
SHA1 6054c414731b3c89cfe5db86fc27446e671d1a22
SHA512 37ad74e09d90232881592dacb5df5c06d03990c25addf4022be40e82cd44284af1f9d402c761a7ce19d1fd4ced4b43cc1d009c97c0c7726a148487574a01097e
TLSH
T17FD09B54B7599D90D456647C17214701758DA9145513E103C5E112D55C86FF241D50B5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85a0acf79b8b86fc4eb30fe2c65838e1ca4747e6a1b57fda9a4542d02c94528e
MD5 83c953e8757f51c93e4d91ff86fff1dc
SHA1 dfa2503f5934d54e0291424c498f4a1a434b7239
SHA512 430cc99e81e9d8bd937719c59b892c5865472a2102532f5606f9b5c81647743c010bca0296a2c7a1b515948d986d6ccf679c670eec5a3ea79aa4e792a64b734d
TLSH
T183D0C010AA29AEE0D025207C03700700358CA9010603A103C6E001910C91BD300C08F0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fb99b812e0f26496acf7edf8450c7e883ac93e161575fac4f8049c4bbb09dbdc
MD5 92a1815fe5f806ea550dc57373648623
SHA1 7d7c74ac6b25be926d5735733d65769dfa013948
SHA512 8c9be61577e3db490af35f3f6d0968eb947e1058b31432a80348469b982f86c545376176b95332b1cae6dd1db830b221e4aa4c2b602e0a7649bb73ce9732236b
TLSH
T1C0D09B5477999D90D856647C17214701758DA9145513E103C5E112D54C87FF241D50B5
MD5 SHA1 SHA512 TLSH

Submit Download

5f648ba7-9c5c-4170-b5d1-666f3e0519c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f648ba7-9c5c-4170-b5d1-666f3e0519c6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

780bf62a-0ea8-486c-b221-99e4d158669b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\780bf62a-0ea8-486c-b221-99e4d158669b.tmp
Size 10KB
SHA256 a7418512027cdafe86adfdaf7bd626e86996922107911871c49f3881c0896ca0
MD5 70a2bc579c89f22623a8c397ce59e627
SHA1 dd50c0f485f69f9de00d11b862151987c64b137c
SHA512 7f436e615d48df08fdf16693a1dc032a25f88514fff372c8cf9a71f3bd43fcc841dac1d24df5f49bd0058e1b7f9921e4695e2ba84a89bd9ef63027d1befedc40
SSDEEP 192:sxZCRdWQ/fNs94cIdpHhHW6+WNGYrdkZiIg5CJ:sxZCWQ/fNs94FBHbGMl0
TLSH
T13D22B8516E28A97B8CC7E20DBB65BF53E6F9503255901E4CA6FC861C09E77DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b99560e-a04b-4ec9-8fa1-135a923617ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b99560e-a04b-4ec9-8fa1-135a923617ae.tmp
Size 9KB
SHA256 ccbe0281bb01b20d314b1302216dbc39dc96a1ff847ae06155d69e123027150d
MD5 e5c6997d92aa08fd7dd446f1dded8e5c
SHA1 7d29920e9d317bba0379dbbbeb4d6d6675175262
SHA512 255bca3f690cf46a8c9d37dbaa2d3be84dd31f724d5eebf61f795fb9297bcba770c1f83694241be4cc61bab358bf857ce503b615cbbe54b231f22ca37a93ac32
SSDEEP 192:sxZCRdWQ/fNsB4cIdpdhHW6+WNGYrkZiIgrJ:sxZCWQ/fNsB4FvHbGC9
TLSH
T10722B7516E28A97B8CC7E20DBB25BF43D6F9503265951E4CE6FC861C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9be6f16b-a265-47b4-aa74-9dc37baa45e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9be6f16b-a265-47b4-aa74-9dc37baa45e1.tmp
Size 9KB
SHA256 b6b77bc9916e27443e37c483ae5e72d997fac0079ec74f406f0a35a493349bcd
MD5 1a1b67998495c2005415d596e1f97e8e
SHA1 6141051164165e78f73fa1567c4bcfb2bfd0d503
SHA512 5fc1147905045fdd965069658579b05df23cca157c5918d9f33a669527d0c922de9a7c3e2a30ece8e9ceeed1dc7aa014aace5db32798c3e5cbba68674404ad01
SSDEEP 192:sxZCRdWQ/fNsI4cIdpdhHW6+WNGYrkZiIg5QJ:sxZCWQ/fNsI4FvHbGC2
TLSH
T1E322A7516E28A97B8CC7E20DBB65BF43D6F9503265951E48A6FC861C08E77DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 c88640ee06a13ce40beb44ad15690f2697a91aa5c5475138bf30edea23fff7df
MD5 c5b4de49c544ae2d43ed3de294f6dd76
SHA1 7b9fe93ccb907e8ec08b9a7d48d3dd3bd06e85ae
SHA512 0e6f6ba0569de78221e72f153488d75b5d5023740597f23ebbff14acc5f9c2fa91bd6ae4c21160ffff5afca9583cb2ee35edb1da93cd26129aa81df43753967c
TLSH
T16D61928555A08C9BE3AAC9BC97D5338F3730458384432EDF1994D97797C6B6701B306B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 413ab6e48d9ffaca0e966fc3eaa734370953772ef4353ae9186068c7de0f3275
MD5 dd5d27c29f448b01201f5e22ca8dad58
SHA1 134921fd94124453b99861843d27a337c91060b1
SHA512 51632404e9a9a3c4cc9abdaef682b0a03423925412d4c76edf6f6c38e9ebf95485e89096c55c1f222dfc3f4ffd9ad8692b68a81dd8288fd67ea4a5c9050b3c70
TLSH
T1596192814A904C9BE7AAC9BC97D5338F3730858384432EDF1994D97797C6B6701B306B
MD5 SHA1 SHA512 TLSH

Submit Download

fe73525a-e844-4209-bc4c-0d2ef5fc76a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fe73525a-e844-4209-bc4c-0d2ef5fc76a3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4daaa9bc-2273-47c0-8d98-bbcc1c7c4440.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4daaa9bc-2273-47c0-8d98-bbcc1c7c4440.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7f52d0d0-d2dc-4a90-ae1c-f550bc563a18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7f52d0d0-d2dc-4a90-ae1c-f550bc563a18.tmp
Size 1KB
SHA256 d562e077c4bb6e34f2f4ca11da3954bd4717212bff4ead8f2ce8a124c055809a
MD5 9d1a26291c1014ec716c3aca128dd6fd
SHA1 30409f61a68e6b418d747dad53dadbf24739d310
SHA512 37a9e36a18287b1acc43804d4d3162ea094f572cc81e989437f1087a97d6eeb23763a7f7bdd1de970f6eb1bee85d0d2d66ac9ab564cffc139fb1d80c78747c05
TLSH
T1D2217CB3C6D5C6AE891116F05B24AE2BCE2D054A42287D1E8DE4EF1B93E34B5D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

944753a6-acf5-473e-89ae-d8a27fd63f6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\944753a6-acf5-473e-89ae-d8a27fd63f6d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2bdf1c2ddd1d398ee02b8b60d5af4e8825ff4c701751c71f55cafb9961a3299f
MD5 fe2f1b1195856db845e975b92b3064bb
SHA1 4c0feaa1847ce0796a20cab57b8f983401ab6943
SHA512 ebd8b32646a60d2b6b7763ef1192d2322159f80cc4c50113fcd25ffcce7d7cec7a073f9c6bfcd3ed0007db02c7d25bcc8c023d3414c7c3b7a831159c5b56dcb9
SSDEEP 192:sxZCRdWQ/fNs94cIdpdhHW6+WNGYrFZiIg5CJ:sxZCWQ/fNs94FvHbGv0
TLSH
T15A22B7516E28A97B8CC7E20DBB65BF43E6F9503265951E4CA6FC861C09E77CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6184a76a977663fade03add1fca7445969905cb4e23b90539192d5034782de47
MD5 f5959030e0e1d994866a0998a171c3bb
SHA1 22ab591f40cce00b306149697b5c34056e8b6e2a
SHA512 4583c87e1326b8827ce19a5fa361771d334f00c84e39a8ecbbe96c89accf549bf42703cbd0d01d873c6f9f1565fd73db4c879c12838c6501aba31907a0469fa3
SSDEEP 24:KCQPwYuIJKMhc1qSBupyXIR7to8rnk3roxPIOxkKlHhtHk1jp0Spa7rLXSNqMIIP:KYBIJKacMryDiI/KziYnvIZKg4Mny0
TLSH
T17491211172B71300383E6A4945B59A6B0282B1F63428ED7F7FBC51658E6BE045EFC8DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7a82164-cb23-45ef-9fb4-badbd4d1eeba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7a82164-cb23-45ef-9fb4-badbd4d1eeba.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f61e67c2-53bc-47b4-adad-ce2e0a4600a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f61e67c2-53bc-47b4-adad-ce2e0a4600a4.tmp
Size 27KB
SHA256 bac9496608c07437baea72c83d41f7981d3f83bc79b38bc4435d71530ffbfc26
MD5 7a7714a06586d6106ec6bcd907e9a3f2
SHA1 45475ff2cde5467a697d06a574219d65c0529a25
SHA512 650abffdbcc302d425dc63ea49d0f42361153b2e8a90fe135d7eee1986c73d9b4ce9c41d4dba187d723ca34beadc26bdbcef951fdb07d042977870b7a492b9f6
SSDEEP 768:kbqqHHlWvdD/T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVU4LliA1nvroQOC1cy:kbqqHHlWvdD/Tu1jaF4LYsn8QT
TLSH
T189C20B3B284CCB7E4FC01A9DDD5A6F977EA802C7A6648D4047F9894C02C77EA61274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d86db1a-7007-4fa7-973e-c9144d3be82b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2d86db1a-7007-4fa7-973e-c9144d3be82b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b6369ff0-c28a-4e06-b15f-296f501f18aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b6369ff0-c28a-4e06-b15f-296f501f18aa.tmp
Size 21KB
SHA256 e9aafa37ed5a92bb1ff14dfb59daf7c3c76688e1a5ee067d9d7fb19ba8b4f9d3
MD5 c94cfd9bd838e5f85f5b90932e7412ed
SHA1 f1bfd25c711443eb931c706803cb6a4ca82fa7b4
SHA512 78d9a8e5b8408b22fc3c60ab78252c2c6228eccce8b54d005f21e3c51b9c2557baf63e5be10531d2be748593c0bf377ca96e3d06078069dd2d4ac1cf65bf5b0f
SSDEEP 384:GiFiZcIvzsNV8TUNTUlIlkZQ8DiwQPxUKX54S0hZBEQU+JmXG5VZh6DKhHjXoh:tFQLkwgmiTP5Z05ErQGG5fYGHjXG
TLSH
T119A27D735C689D7B9DF6BB85F54722038EB48067C685BA80E2DD6E1D019B2EC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c555f7ad-4a88-44cf-9b05-c3997858fecc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c555f7ad-4a88-44cf-9b05-c3997858fecc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 90a9e35c34271276caffa7244376b37bf417077349a331b0b682d8957dc852b6
MD5 8da13bb8506fb8f0752ebacef4102c18
SHA1 3f755b78bd85dae05333169c2f2da9d46e00edf4
SHA512 4291b9cda6e37924ed6328b93f8beec00240ebf5ec9278f9db2fdb957492db66c3e565979cbf54f70a056757ac69eec444aa6f854f08f782535b0a7d1a40d63c
TLSH
T1CA412C58A6EA1148B3B76F569BF7686D447BB8732E0A949D10010E4F0A73B04C972737
MD5 SHA1 SHA512 TLSH

Submit Download