441d7a6d91718fbaa0391d8ed656baed119a966034bb648d94073b8ccf8b1ae3

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/10/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
_pdickison benefits_Salary Adjustment.html
Size 34KB
Sample261011-ph2f3ahf74
SHA256 441d7a6d91718fbaa0391d8ed656baed119a966034bb648d94073b8ccf8b1ae3
MD5 db1891b7242cb877a7155627fd06a657
SHA1 84313ad4a0f3fd5a83b7127d7a418dd6c296f571
SHA512 117095160cc0c3ddb588ff536c79acf73eb15e14cadadfbbd3512230b4bee08295f11ae6f0c92580705c1317aa3302d89b16f356c8bbd9e8425ce29f99f1e6e1
SSDEEP 768:xmZYg2Q9Q+bHF5ZaVcVEOiDbYJ/oVWWtIp:xfwm+7fUWVl2YJ/okWyp
TLSH
T1BFF24BADBB6C18DE86BA1576E8304A4D4772E706EFC93488B7D5B80A11CFB71DC09819
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{BBB46F64-5500-4D88-82B5-BF4B4AAC35CD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 1636	4724	msedge.exe	87
PID 4724 wrote to memory of 4388	4724	msedge.exe	89
PID 4724 wrote to memory of 3900	4724	msedge.exe	90
PID 4724 wrote to memory of 4388	4724	msedge.exe	89
PID 4724 wrote to memory of 4388	4724	msedge.exe	89
PID 4724 wrote to memory of 1880	4724	msedge.exe	91
PID 4724 wrote to memory of 1880	4724	msedge.exe	91
PID 4724 wrote to memory of 3956	4724	msedge.exe	92
PID 4724 wrote to memory of 3956	4724	msedge.exe	92
PID 4724 wrote to memory of 3956	4724	msedge.exe	92
PID 4724 wrote to memory of 4984	4724	msedge.exe	93
PID 4724 wrote to memory of 4984	4724	msedge.exe	93
PID 4724 wrote to memory of 4984	4724	msedge.exe	93
PID 4724 wrote to memory of 4556	4724	msedge.exe	94
PID 4724 wrote to memory of 4988	4724	msedge.exe	95
PID 4724 wrote to memory of 4556	4724	msedge.exe	94
PID 4724 wrote to memory of 4556	4724	msedge.exe	94
PID 4724 wrote to memory of 4988	4724	msedge.exe	95
PID 4724 wrote to memory of 4988	4724	msedge.exe	95
PID 4724 wrote to memory of 3264	4724	msedge.exe	99
PID 4724 wrote to memory of 3948	4724	msedge.exe	100
PID 4724 wrote to memory of 3264	4724	msedge.exe	99
PID 4724 wrote to memory of 3948	4724	msedge.exe	100
PID 4724 wrote to memory of 2164	4724	msedge.exe	102
PID 4724 wrote to memory of 4280	4724	msedge.exe	118
PID 4724 wrote to memory of 4856	4724	msedge.exe	119
PID 4724 wrote to memory of 1624	4724	msedge.exe	120
PID 4724 wrote to memory of 4544	4724	msedge.exe	123
PID 4724 wrote to memory of 4544	4724	msedge.exe	123
PID 4724 wrote to memory of 1896	4724	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\_pdickison benefits_Salary Adjustment.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb5f6ac188,0x7ffb5f6ac194,0x7ffb5f6ac1a0
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1808,i,13358807110364571454,7346043280018774201,262144 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,8450014832091430608,11090894683884850079,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,15408887944289503516,256688500587068538,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,6571837143636704071,11754850386324302131,2097152 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,41961555210764081,7621423301517708971,2097152 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,9529998825450819148,129884366486666115,2097152 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,10951332383268625392,8712987865887317652,2097152 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,1750927490865179008,17775497890772920262,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,6098545806519256993,3778837177234625061,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,9628529735493466978,6584647929706510296,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,9628529735493466978,6584647929706510296,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,11533428790596812192,419791618665092953,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,13714802248759124643,11223062390820364416,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,15576408968392769236,210117715528701433,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,8310033332519585325,3709325109573028819,524288 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,9119303509787586685,17155135817293219876,262144 --field-trial-handle=2320,i,5646681353785404178,14360366867972895521,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

64feb098-90cb-4505-a1f8-c1bc71638461.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64feb098-90cb-4505-a1f8-c1bc71638461.tmp
Size 20KB
SHA256 62746fb728db955184c079bde0f392bd6311b7beff6f44680aa63e6712e4e741
MD5 f195bc8e6081bc9d7b435ae211356bfb
SHA1 12c609a8e8c0678902bda1122d2f4424c00fc5a3
SHA512 221dd2ae80d2021159c22b3129295839ba1a856ff5003a7101334bbcfaaa297f6b41d4af9bce4059a85b9f6dc278283e8777df83e5afbe6339700139a9225539
SSDEEP 384:liFiZcIdzsNM8TUNTUlIlQwiEib4r9GOjTVRIOtr5bjqISOMTx:sFQl5wgHn9nwOTjqISOMTx
TLSH
T165A26C329C649D7BAEEB9F45F84E32038FF45067D5956B90E2CD9B0D019A2DC1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eeb96b4-5bc6-49e0-8336-ed3658a50f35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7eeb96b4-5bc6-49e0-8336-ed3658a50f35.tmp
Size 8KB
SHA256 083f3c8b1f22e4ecdb19d22eca296b948f60c0c096f51c888ed2667d3e4d2d81
MD5 8ba32782e91e876a902004d78f4ca64b
SHA1 0588ba7647a40804a70234a64a05d15a2765a5b1
SHA512 2425c13ec1821b2d4aaa4fbd509094358282bb0f4b0b7ada41c5a2d0df73a77b62eed70cbba5a95581e3c8b8c4c357e42b3cb6f26ae022fdd0c295406188f508
SSDEEP 192:SONl6yiQmiUyL96SOCTVgKIOO+40YMjbj1EIl3Uk6qjU6:SONl658sSOCTVRIOtr5bjqImOU6
TLSH
T1E8120935B8786C775DE2A945F48B32039EA94167D94A3FD0C5DC2F1C06DF6AC230AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b00001f9-0e43-41ba-8012-7b81babd9ec1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\b00001f9-0e43-41ba-8012-7b81babd9ec1.tmp
Size 105KB
SHA256 3f461bb307501118465fa355b5c41e2a705f236a6f0a9d6da2f7ec220831c703
MD5 b128b9eab72c965083b92d5147aa016b
SHA1 50e10f3f576f2ffa690298c3261891f992813335
SHA512 c7356be074c8c4dac39c2b53fc3c679e844ec686a16cf50df2caffd578fd4ff9775661084c859882e8c383687ff10fc72b9c4d7784ae1707436f3dee76196979
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7r:fwUQC5VwBIiElEd2K57P7r
TLSH
T193B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

48dad54b-d39f-444b-b914-a807b40798a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48dad54b-d39f-444b-b914-a807b40798a8.tmp
Size 9KB
SHA256 c8659fe00c74aef382ad6ed657e2f21c22a28ff898ff174c4004ae8d1f0e60d1
MD5 195adb04f195c5c7834d6a0d5933b41c
SHA1 78756cd7ba43e6bd658eb6777f21bb1796248de4
SHA512 93a85f43b5bcf4cb06025cc8dfe7256ce54df3cd7ecf6c494503e26722d40e6d82d4ec7548c6a2fb37bac2d772fadbce61387d6b9ca30e13dea45be79468171c
SSDEEP 192:sxZ3ERfWJ/f5st1tIdpdJHW6+WNGYRPR/t8RIg5HJ:sxZUQJ/f5st1OHHbGmgd3
TLSH
T13822DA116E38657B8CCBD61DBB65BF43D6FA5032A1D41E48EAFC961C09E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fb14831-9383-4207-a754-e779719029d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5fb14831-9383-4207-a754-e779719029d5.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

7289d81a-ddaf-475d-aa1b-6cd869e0de38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7289d81a-ddaf-475d-aa1b-6cd869e0de38.tmp
Size 10KB
SHA256 21e4245160f7fea966c68763448fe2aae3639b14198936d2fd79102810831651
MD5 c6458f42a620fc08ff94823869d00cff
SHA1 b14082eaa7cbf0b602f389259357b77a66dd5eb8
SHA512 56095436c09a042c85125ee1c2513a173db7faf0aae6dae54e6f18145c7833f1af24c5a9ce6d251e9b4a34d44562d0c7f70027320efbf382d1cc11887eaced1b
SSDEEP 192:sxZ3ERfWJ/f5stDtIdpHJHW6+WNGYRPhat8RIg5VJ:sxZUQJ/f5stDOpHbGmfdp
TLSH
T10C22D9156E3869778CCBE61DBA65BF43D6F95032A1D41E48A6FCC61C09E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94b295f8-73e9-4b39-81a0-7098c23fe313.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94b295f8-73e9-4b39-81a0-7098c23fe313.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ae722a6-7618-4c47-b375-59b2a0ad973d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ae722a6-7618-4c47-b375-59b2a0ad973d.tmp
Size 27KB
SHA256 0ade74860f0d00c0957daa79bcce2e4f330e87ff7fa25df18aa4391f6318b2bb
MD5 1ed1453014e023e9e65ef696941ec1e4
SHA1 7dc5b52ff3df40355fd273b8e370959aac14c292
SHA512 07914d9a0d10ad5790c68df3c8f79031df8f80e727f0cc5683115094d09c718be002c35e9937c802d130ade5ae343fcd3464a9ca91fa102ffefe4b647862182d
SSDEEP 768:EmK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3troE+yd:EmK9uzYWvcQWsu1ja0HL7Q3GE+yd
TLSH
T104C20A3F640DCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA62264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c339f2f-67d0-4709-a09c-4f10fc063a6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c339f2f-67d0-4709-a09c-4f10fc063a6a.tmp
Size 9KB
SHA256 1850bd3260a507ec96d671f0601b09c36d50648c1fa0e32bf10b4bb200c05a15
MD5 d8b4f1e809769af6ce05c6fa26483669
SHA1 5ee95c166ec0711ccb25c104d968524879cfb314
SHA512 fd87450edc602fe9fda4ec91b43d2e88f958a6da0637a4b65bf8551d6a5e4c95aed175a08d0c38af625406db072e1d2c61caa3031664d368adecaed33a1206ce
SSDEEP 192:sxZ3ERfWJ/f5sV1tIdpdJHW6+WNGYRPR/t8RIgrJ:sxZUQJ/f5sV1OHHbGmgd9
TLSH
T1E722C9116E38A57B8CCBD61DBA657F53D6F95032A1D41E48EAFC861C09E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 cd20116ffb40c6bc49836f86b6db729e51933babec1dfc63f7a74f9c27664113
MD5 6edd22196e38773d26ebcdbb50a151b6
SHA1 9a0861dd86a5919e71e40f220f0a2d270d1757d9
SHA512 a84197c7bda8ae441f21880c5438b497102a7de6f80cac7fe058754cce5c59c2354b9b502385dc9d27b628229ca23e41fa3afac465d34c96a9b94275e485258b
TLSH
T1BF61838A1740C0AFDBA8A3B051E70177FA3575B805836FF2A999EB7A5726F1AD04C074
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fd4ec6862663a464a15aba74f0440f3c2a79dd8251f0c612c7365be70315f509
MD5 bd701ee1e72136010db4197b75aecc31
SHA1 4c2088815c2f0dd77c60634bd1fd69c95b5df6f1
SHA512 acbd169002d4a0792ea60e68ce058e4d2bd518ddd85f010a29a2355aafef81486487f1f4b8f0354c6ce9d21dcc53772397e8e65b352a5265debafaec9bcc3a0d
TLSH
T19F61848A1740C0AFDB98A3B051E70177FA3575B804836FF2AD98EB7A5726F1AD04C074
MD5 SHA1 SHA512 TLSH

Submit Download

559f99e7-d54e-4add-bda5-8cdd8f4a0ef0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\559f99e7-d54e-4add-bda5-8cdd8f4a0ef0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

9d698877-29cf-4997-8f6b-5937a0528bda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d698877-29cf-4997-8f6b-5937a0528bda.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a641fe3b-3dfd-4e9d-8896-3a9a683ee4cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a641fe3b-3dfd-4e9d-8896-3a9a683ee4cd.tmp
Size 1KB
SHA256 ce6d973b5fd2d478e2e9802f2040fd2dbc1cc28c39647c219d246e1eb4d9b661
MD5 ed0dc95a45bfbaeccd574a4f3a919f99
SHA1 de4446bf7fc05f2d5e35ddeabbef1118774f76e9
SHA512 40a0e7c4c7eee2c2a4e0957bcaf95d1803b72e08f6dc4b4495442ab18fef7e1cc34bdaeb55e8cfab99f496430cfba189f68665ace303ea02aef99189e303c20d
TLSH
T133118CF7C3E5866E891156F0AE24AE2BCE2C0506432C7C5989D4EF2B93F34B5E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

b61c9dac-39b8-46f1-915e-1bb20c2daacb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b61c9dac-39b8-46f1-915e-1bb20c2daacb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 56c884c9732d357449ac749f294a678ac55ce120daa592d32d685414ae458894
MD5 95b3840d398dec75a83ae9cee038a207
SHA1 315b4a7777016edcad59710cfcd0648e144044ea
SHA512 9fed84516a24295e91964421023f97ff08b4d56f47bd0ad313f08be67d05bcfdaa300905292f49904434bcdc0d77183140092fe37a725bdc777717fb17f4eeb7
SSDEEP 48:K0mImXaDX5ZpCbBsxISnCK9n1NCxHSYE1XryLI5IIIVIpIzI3ILIkbI3ISIPISIs:K0mJIwKROuevqKg0vIgKlq9
TLSH
T1E2915F4075AB520138BE395981B4875F928231B37029EA6B7FBC10B28F6AF140DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc4f5f51-10e7-4194-aa9d-a4febeb605b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc4f5f51-10e7-4194-aa9d-a4febeb605b6.tmp
Size 10KB
SHA256 e404cd635d3204929768060069689a0bbc1e6b41230e2e1bce1eb6ef8d0d8da9
MD5 25179c18aba49ee95e0bfefafda7ecd8
SHA1 fdcc04395efe19834231a68b7136a9f8870dc403
SHA512 52f8072ecc990908742a39d692e76cc5f58da87a60c62882199c4a757f38cd4693b5938720ae082ebc153afc52282c90f4e0dd8b61655489cc6bbaaf8139236c
SSDEEP 192:sxZ3ERfWJ/f5stDtIdpdJHW6+WNGYRPu/t8RIg5VJ:sxZUQJ/f5stDOHHbGm3dp
TLSH
T16422C9116E38697B8CCBE61DBA65BF43D6FA5032A1D51E48A6FCC61C09E66CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22d22cdd-4962-40db-b45f-ad3cab4b5224.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\22d22cdd-4962-40db-b45f-ad3cab4b5224.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa0e9def-6128-4312-99e8-fd5cccc730f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aa0e9def-6128-4312-99e8-fd5cccc730f3.tmp
Size 8KB
SHA256 489f75caf3d6a27e189bbf6371fca68cf055191ce7c2f5fbd39ba4e3db5daedd
MD5 7cc1cebc4a5f1de1e9c4caa83f8c6385
SHA1 15368b5759ee4d7655c027acd4199443428bc0e4
SHA512 9205910e40392cbe7f0969d2bdb90d1c4bf37d47d69e4714cafd5e7e8afaf33b872900d529dbd77f0d84162bdb42517c1416d536cf62c43e29f600f2b9ab262d
SSDEEP 192:SONJ6ygpQmiUyU6tOCTVgKIOO+40YMzPkmDU6:SONJ6lH0tOCTVRIOtrzxU6
TLSH
T17302D834A8683CBB8DF3AE46F48B37139FE4116BE9512F84DAD81E1C01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4968ca3-ce04-450e-8c92-419d720083d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4968ca3-ce04-450e-8c92-419d720083d2.tmp
Size 18KB
SHA256 5311f134684e37e13f89d85eeabcf920ca0cd49db3504fd735fb5b39760e1791
MD5 ef39d315f1148b0ae7616f18545484c9
SHA1 c2c6a1a45e73c093153527ef39ca3624a2c7da8b
SHA512 ec20de715872d2830d003ffcdfed24fd6b3efba1e3d457dc36ecefc0aec733ddff29c080a14de0972ff2ae7ba8bcd465c0deb189aa77bce9b31cebc232101a3e
SSDEEP 384:bZcIhsNEJwiEib4r9GOjTVRIOtr5bjqIiOMTx:Dhin9nwOTjqIiOMTx
TLSH
T197828D31AC742D775EEBA645F48A32138FF89027E6C52F94D1DDAB0D01DA6AC2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1ced8f7-eac3-4916-8cf9-6b38e5890d21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1ced8f7-eac3-4916-8cf9-6b38e5890d21.tmp
Size 18KB
SHA256 fabed0aeeee8680b9e6d87080712b8f7c8afcdbdd3bfe2496627e3d2bb15a662
MD5 230ca28f500e310cf819ccad4b3759f3
SHA1 92c6d70d507fbbaecc9ba21a7d1b1dfea9af3c96
SHA512 667af0db5ab33610140f0e5ec9664c4221140222edd0570dfac54b5f3a81c5731aa4bc7729e6240f295b0b7529a7dfecac5b9ba88ac8ed50529ca68ab8b7d5d5
SSDEEP 384:/ZcIhsNEQwiEib4r9GOjTVRIOtr5bjqIiOMTx:XhZn9nwOTjqIiOMTx
TLSH
T164828D31AC742D775EEBA645F48A32138FF89027E6C52F90D1DDAB0D01DA6AC2307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c83ad577-6ad5-49b1-9173-6476cbafd7b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c83ad577-6ad5-49b1-9173-6476cbafd7b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04e436f745069e155f654eded0af0e36610c36e00dfc78271599a6a7801eb9bb
MD5 fa42ff2d9eb59997557554d6439c1c9f
SHA1 6b63c906db3b2035265a8b415a7d22a0cf0eda2a
SHA512 c28c86a7d728de57327b284fa61698700c9919e16804785df44284946e2633d4f429078909ad7b0790b4ea5733f58dacf76c977105c892b0994fbbdcfa2d52b3
TLSH
T17341275CAAE91148B3736F46AFF6686D587E79772E06C45E00010E4F0663F40D8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download