fa5a4e3372b1547c5fb744c26e19689ed1b26f4cf9c3430facc978a36c70ff1b

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/10/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sdk1-prod/index.html
Size 3KB
Sample261003-vsj8esty4p
SHA256 fa5a4e3372b1547c5fb744c26e19689ed1b26f4cf9c3430facc978a36c70ff1b
MD5 8391053e609d1a75c86aecb93db8cf74
SHA1 1c909f41adbb6400bef7529cd61d61d2665a3f8e
SHA512 5751c8bc02cdf8e74fc625abad1bbec170c813a57e390ec9cfd636e8be98ee0c7e07fe1d00b3d5e44e6754482653cca4ccb349af4daf4fc692c64edc5a2e54b2
TLSH
T1B5719616A9284539F256A2A03DE0C79F7349EA07D64689787CE48180C68EDF2D8FB56C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{E56BB368-94FD-46DC-80B7-ECD485E529CC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe
2292	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 3956	2292	msedge.exe	85
PID 2292 wrote to memory of 4672	2292	msedge.exe	86
PID 2292 wrote to memory of 4752	2292	msedge.exe	87
PID 2292 wrote to memory of 4752	2292	msedge.exe	87
PID 2292 wrote to memory of 4752	2292	msedge.exe	87
PID 2292 wrote to memory of 1868	2292	msedge.exe	88
PID 2292 wrote to memory of 1868	2292	msedge.exe	88
PID 2292 wrote to memory of 4844	2292	msedge.exe	90
PID 2292 wrote to memory of 4844	2292	msedge.exe	90
PID 2292 wrote to memory of 1148	2292	msedge.exe	91
PID 2292 wrote to memory of 4844	2292	msedge.exe	90
PID 2292 wrote to memory of 1148	2292	msedge.exe	91
PID 2292 wrote to memory of 1148	2292	msedge.exe	91
PID 2292 wrote to memory of 912	2292	msedge.exe	92
PID 2292 wrote to memory of 912	2292	msedge.exe	92
PID 2292 wrote to memory of 912	2292	msedge.exe	92
PID 2292 wrote to memory of 1044	2292	msedge.exe	93
PID 2292 wrote to memory of 1044	2292	msedge.exe	93
PID 2292 wrote to memory of 1044	2292	msedge.exe	93
PID 2292 wrote to memory of 3328	2292	msedge.exe	99
PID 2292 wrote to memory of 3092	2292	msedge.exe	100
PID 2292 wrote to memory of 3328	2292	msedge.exe	99
PID 2292 wrote to memory of 3092	2292	msedge.exe	100
PID 2292 wrote to memory of 4736	2292	msedge.exe	104
PID 2292 wrote to memory of 3824	2292	msedge.exe	105
PID 2292 wrote to memory of 3824	2292	msedge.exe	105
PID 2292 wrote to memory of 3824	2292	msedge.exe	105
PID 2292 wrote to memory of 2700	2292	msedge.exe	108
PID 2292 wrote to memory of 2700	2292	msedge.exe	108
PID 2292 wrote to memory of 2232	2292	msedge.exe	117
PID 2292 wrote to memory of 1188	2292	msedge.exe	118
PID 2292 wrote to memory of 452	2292	msedge.exe	119
PID 2292 wrote to memory of 1552	2292	msedge.exe	126
PID 2292 wrote to memory of 1552	2292	msedge.exe	126
PID 2292 wrote to memory of 4920	2292	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sdk1-prod\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffd6a4c188,0x7fffd6a4c194,0x7fffd6a4c1a0
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,878342077785270354,10997219256058586462,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,15347094934028645178,224464253786964077,262144 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,5784998210827482723,18071722903456790072,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,9028242265374899665,777034069960762192,2097152 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,8202853436613204687,7148819730266469858,2097152 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,12475371072417097692,17729785409758916739,2097152 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,17988128405704236679,15605366195244285081,2097152 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,14598303565619531540,9842861827803984963,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,15575761826356157801,14151561263650147998,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,1173796317217970996,12273895130863474974,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,1173796317217970996,12273895130863474974,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6184,i,10537921939351927444,13346737007710409049,2097152 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,16833671740329074044,10901430497346969012,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,14739678425286597789,15502648782899942786,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,12776564874398676670,5587870136429984176,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,14356866025914513594,14985755605828701882,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,3814909649663023567,16021380869573384708,524288 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=992 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,6044828423989791828,9306018208249362538,262144 --field-trial-handle=2596,i,9433825715553161589,11464480480924997702,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

286426a5-5f33-4a3d-8549-c5a6fd944b83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\286426a5-5f33-4a3d-8549-c5a6fd944b83.tmp
Size 21KB
SHA256 6e35323e0e8cff326cf8eea9ced906ef50d3af9bea477ae7f36e90927c812492
MD5 70d82b28155b67dd2623b5933bd7e43c
SHA1 4b50a06665aa50af01f179c06364b2e09f978fb3
SHA512 a52100b281c45606323b9ea6e7503fa565cfba6a841d44900ea7b62aea62dc0fdd693b90e95b359ce42aaceecf528b8398f2ce6bbdac1d3a81f8b9102e2dcf0f
SSDEEP 384:sBiFiZcI6zsNa8TUNTUlIlkCtNlS6XiaXCsp5u8iqHtvRtgOIwZOyuaod:RFQSnwgBTkqZRXswm
TLSH
T1FCA25D3398A8D87A7DF79A50FA8736038EB44167D6C9AB9496DD5A1C00AB1DC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58ccc8be-4185-49dc-aa58-80014eb1aa06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58ccc8be-4185-49dc-aa58-80014eb1aa06.tmp
Size 18KB
SHA256 6cae406d875fa451532bdde86d6b3d5a2997dfc62529ce7b10a819363773072a
MD5 db926986e831263cd2be9c7b39e12a70
SHA1 3577a8368274ac25165c61f711bc1d7391da172d
SHA512 2e97a010aeb6ac32029b0fcfa0a957811f9986c9b8a53c57fe841347f45c5abb46d463b2295553d3d887ebe99701bc54a9780afb24e27331a26662d06b2d4785
SSDEEP 384:CZcIhsNCkCtNlS6XiaXCsp5u8iqHt0RtgOIwZOyuaod:wh5TkqmRXswm
TLSH
T1E4828E3698789C7A6DF7D510F98737035EB4816BE3C8AB8494ED671D00FB298130BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7de1efd5-f40a-43a0-bc23-a8797ec615b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7de1efd5-f40a-43a0-bc23-a8797ec615b5.tmp
Size 8KB
SHA256 a01af83fb1aafe9cfcf3cbac886e0ba03f003da466cb65b7f05fec850d20284e
MD5 e3767ee432be437c539c38fef4903f65
SHA1 d6483e96b944c081ab5d4327cd82d3b3b7e721c0
SHA512 c9f55eb4d67a2ea119b2333f9f187483f569e6948100396e964ac06cec52743a29d8901c01b937a5674b13a4abccc63fb009bc8c03595aac24907ef2cdd71d5a
SSDEEP 192:SON86iDCQmiUyTJHq5u88PLuhLSqlroU6:SON86/QHq5u8iqvyU6
TLSH
T19F02F739AC687C6BAEF3AD15B5477B235FA4012FE6942B84D9E81A1C01E729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

02df5205-1c44-4da8-9561-9d910e7d0cb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02df5205-1c44-4da8-9561-9d910e7d0cb1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0744e31b-13c9-4e3a-844f-4ad42be3ec5e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0744e31b-13c9-4e3a-844f-4ad42be3ec5e.tmp
Size 10KB
SHA256 a1c18eb6faa8b8bf4eb3c4a33a2212d913afc0c8cae08cd5772a966ff2f8b15c
MD5 4d22952fc3b730a7cf60ac573ae9270d
SHA1 438cbfb24729f92a86057a9d43603ba36e592d7c
SHA512 af4fb7ecbbf4ed177b165bb6242ddae29ee3ca817abd03773b58fadd723dac9dc75aa56962345f3d7be599abc4d88b960896e8d4f554fe31d258501c9cec8c2c
SSDEEP 192:sxZJRBWz/fAslVGIdpdAHW6+WNGYaQSAIg5NJ:sxZJCz/fAslVnCHbGKR
TLSH
T10322B812AE28B57B8CC6D21DBA15BF53E6F9507251901D9CAAFC852C08E77DE220744F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c3d9d9c-7f55-4935-ab97-98b7ab7e569e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c3d9d9c-7f55-4935-ab97-98b7ab7e569e.tmp
Size 27KB
SHA256 aa4142aa8b1369898f648e653a544d64002aae16e7f89e7f8cffbecbf357ca9c
MD5 32d5c9f847407344b6f7a89734bea345
SHA1 f7854ee56a20b94140603b6168e3aa6ed3138b69
SHA512 5f12063d60011738aa2396b3941801fd621ab35d6cd5ba43786c89a0b95c788076eeeca127f7c737aeb52dfcb77c6f77472ddad0f586f8f192f6f847ae8efbd4
SSDEEP 768:LcyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH34roUZfWK:LcyQRbrWvvlpZu1jaXKLf33DUZeK
TLSH
T1CCC2E92B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

735a04ca-765f-4434-abf2-70221d2a617d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\735a04ca-765f-4434-abf2-70221d2a617d.tmp
Size 10KB
SHA256 f0d5e010ffdb0496c9966b6d3303fda616e8ff3305bf66686279c70d880bc836
MD5 7ba7f626dd8e775143119b0d4692b2b6
SHA1 3b19214435ecda933be842c6d0b8ae721ad1cf03
SHA512 d6c4b766ea4e4830684f41e22dfc7549edeea29836ea2435dfad6aa63dfff4bb1bd61a3a3161d25b0d788bc779bfd824781a71790b387d3f0beee53647a7ce61
SSDEEP 192:sxZJRBWz/fAsvVGIdpdAHW6+WNGYaQSAIgrJ:sxZJCz/fAsvVnCHbGK9
TLSH
T15322B912AE28B57B8CC7D21DBA15BF53E6F9507291901D9CAAFC852C08E77DE220744F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 71KB
SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
MD5 4b73e2ff3024784eca66d2120a9bcb22
SHA1 2870bcb8ece10145e089262bb6634d18ac85bec6
SHA512 9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a
SSDEEP 1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH
TLSH
T1F0630245820BA35EE09D4A79D27481F61FC2CB5C2BBF5C27538289AB5F57DBF6410134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 9cb416eea4af2af69deb522e995f190b7c258c9eac0316d5b5e35ecef4df3d16
MD5 cbbcde702b61b03566ae587cca021fd4
SHA1 2208644fce6fdea5f6756615195cd7d3c5f91b59
SHA512 b692589916d62e5e5e81a53629105e5e41a698db5e59347f87199d86892333645fa2ef93ad97e68aec5b081d24d32817167887202480af2d0728e9256cefe381
TLSH
T1A6714B8053B08472DB98A6B0D1F190AB3AF459F159CFEE5231E0FEFA4B13F6490E4062
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 374e90accf1a03133d20a55900c15fea5bfbec97f323eea42cb4368bcfcc0daa
MD5 f410a98f1e3342fd102792e24c2465eb
SHA1 db80d5337178912b441cfe2aee4939b8b485d11a
SHA512 ccbf2aa64bace4d3c93a7e004eb8c9e0a9f0011fdc6ea98875262ee5e720db9df5e63c50d9f1081afb31892ab4559d13ca8246727e09ff238fb5bfabd24f6678
TLSH
T1A4613B8057B08476DB98A670D1F1909B3AF459F149CBEE5235E0FEFA4713F5491E4062
MD5 SHA1 SHA512 TLSH

Submit Download

b7aac533-98fe-41e7-81a1-89e68a5f49ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b7aac533-98fe-41e7-81a1-89e68a5f49ae.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7a45d28a-d6af-4c4e-9a56-d2d2ca95285a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7a45d28a-d6af-4c4e-9a56-d2d2ca95285a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8ca7a0ba-b1a4-441e-b14f-a0041ddce340.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8ca7a0ba-b1a4-441e-b14f-a0041ddce340.tmp
Size 3KB
SHA256 b96e8064a4d9a7051d69a60d6bdd94598693f811597eb05c3ba728bbb0eff266
MD5 9d3457dd260ab57d682710dd6b304c61
SHA1 abb38d51d6e205fb1db0301354179a647df3759f
SHA512 59f4c2f3aad4f3cfcdee53367c00c91319b34e59f8318f45810f069761c7f90fdac447c01a7f3423959e6ff7520362d5fc702fd5960781242b7ec2d863f77690
TLSH
T15161D0B6C3E4877E991156F09A25AE2BCE1D051B522C3C578DF4AF4BA3F2071D20269F
MD5 SHA1 SHA512 TLSH

Submit Download

fce7d6e7-a100-4f14-9ad4-46367a7242b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fce7d6e7-a100-4f14-9ad4-46367a7242b8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f9bbb530d033b80ac9d6d55eed2e0108c7a06d1b7d3436ed494c4bce6e786570
MD5 2e4ef10fda70080c9af2eb467fcee04a
SHA1 274cd8726b5d8fd9fb9f025b06408bfd5e86686c
SHA512 31663c92a3e0578197b3dd0376608dd21f533aed869bd0c242b2d62907f3a5046879e8d073763822917e26852b772f0ee92282ee15fc5ba0af6ede318fc8dfc1
SSDEEP 192:sxZJRBWz/fAsqVGIdpdAHW6+WNGYaWRSAIg5nJ:sxZJCz/fAsqVnCHbGu13
TLSH
T10E22C912AE28A57B8CC7D11DBA15BF13E6F9507251901E5CABFC862C09E77DE120744F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 da3758abcb729dcd3c844547c86e763fb66f3795050f56ccf92a5367d82701c3
MD5 9a25e3ae9c121de43d50ca9f000e9153
SHA1 ed476e1eb1cc42406513f575d32865ddc33560c3
SHA512 31b22df28ae975de58eb6b21dc7dc21ad5ddfedc3b60518f013abbbb6d98fb30fe92cea24a0d02c9ce9c71914a41ffc1e7012f01bfe6b79718fe9f90b97a4f8e
SSDEEP 48:K0u5uIuVupuzu3uLukbu3uSuPISuBukK9uB1urukxuJu0YuyuzuJu5yLmBcBLPTF:KgBSKaEKlqoKzKNm8KP6yyi
TLSH
T110918212316B428238BE354E51A5976A429132F3315AEE3F7FB949E24D2FE014EFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8120d392-4505-4e56-bfd9-c423054b5ed5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8120d392-4505-4e56-bfd9-c423054b5ed5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

acf6d5e3-39fe-4477-b00f-d7a0e52fe9f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\acf6d5e3-39fe-4477-b00f-d7a0e52fe9f9.tmp
Size 18KB
SHA256 867681302fcaed9d6eeb1087e5cbd7b6604548d7e1d055db7bb4fce7807b4533
MD5 3ef1de78efe3c707459c5c8ad2440043
SHA1 aadf966d9e4f6e684cde03ca47a60ef8956d8281
SHA512 820e41c69e6bc506663a6966a94ead87771dd7e3aaf5c4fd54360ce13ca485d3698515abcb566405999bbbfe589c5efd38e1f2631cfa2850c55a6113432f8fb8
SSDEEP 384:yZcIhsNCRCtNlS6XiaXCsp5u8iqHt0RtgOIwZOyuaod:AhQTkqmRXswm
TLSH
T129828E3698789C7A6DF7D510F98737035EB48167D7C8AB8494ED671D01FB298130BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af29e79b-c578-46bb-8b5a-0e7a2695cd63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af29e79b-c578-46bb-8b5a-0e7a2695cd63.tmp
Size 8KB
SHA256 253c78ae88c2f33bcaae53e28695bb2f6166001d05a37794ac079e3d62d5c775
MD5 105d5e783237de03cde45d954a411296
SHA1 1886be2bd9c9731ae83a10305c321db9c70c351d
SHA512 bc2fb31835d1731f2248e6df5a5bb42838f61cde710abbce8932d94d223adb1fad1dd6aea262058252890e23b4a078c75cdceb2793447a4bd2724aa16a6254a2
SSDEEP 192:SONL6iDAQmiUycTJC8q5u88PLuh1tetGHuZgqrU6:SONL6l/lC8q5u8iqHtyRU6
TLSH
T1E2122C35A878AC7B6EE39860F58736135EA5422BD7C87B84D5EC261C41FF29C130B613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62d51887-686a-4459-82a8-69d57a8b3758.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\62d51887-686a-4459-82a8-69d57a8b3758.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c62b94e9e516735d8898f4dc126bbb99f83f1da07ba314fe4581580e957a9eb
MD5 c748258255b190e826e9707e7168f3b3
SHA1 d9801d73dbcdaed39f41cea4e6f23d5568382e2a
SHA512 0e102fcdef7879893a3e7be3bf3ae10cb8383ec9bc553ad3c4a73c2009a123c977ae9c0b5c6adfd7d7f016c9f8291528581ba40e4ba451bb818638d5f672d292
TLSH
T1C441395CBAFD1148B3B7AE565BFAA83D087BBD372E46D45D10110D4F0A72A40D861737
MD5 SHA1 SHA512 TLSH

Submit Download