hxxps://example[.]com/

Analysis

max time kernel
179s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://example.com/
Sample261014-sty2vsty8r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2520	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{D7D133D8-22B3-46AC-9B30-91A6EEDF1181}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe
436	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 436 wrote to memory of 1872	436	msedge.exe	87
PID 436 wrote to memory of 2520	436	msedge.exe	88
PID 436 wrote to memory of 4052	436	msedge.exe	89
PID 436 wrote to memory of 4052	436	msedge.exe	89
PID 436 wrote to memory of 4052	436	msedge.exe	89
PID 436 wrote to memory of 1040	436	msedge.exe	91
PID 436 wrote to memory of 1040	436	msedge.exe	91
PID 436 wrote to memory of 4812	436	msedge.exe	92
PID 436 wrote to memory of 3372	436	msedge.exe	93
PID 436 wrote to memory of 4812	436	msedge.exe	92
PID 436 wrote to memory of 4812	436	msedge.exe	92
PID 436 wrote to memory of 3372	436	msedge.exe	93
PID 436 wrote to memory of 3372	436	msedge.exe	93
PID 436 wrote to memory of 2552	436	msedge.exe	94
PID 436 wrote to memory of 2552	436	msedge.exe	94
PID 436 wrote to memory of 2552	436	msedge.exe	94
PID 436 wrote to memory of 2140	436	msedge.exe	95
PID 436 wrote to memory of 2140	436	msedge.exe	95
PID 436 wrote to memory of 2140	436	msedge.exe	95
PID 436 wrote to memory of 4180	436	msedge.exe	100
PID 436 wrote to memory of 8	436	msedge.exe	101
PID 436 wrote to memory of 4180	436	msedge.exe	100
PID 436 wrote to memory of 8	436	msedge.exe	101
PID 436 wrote to memory of 4724	436	msedge.exe	103
PID 436 wrote to memory of 3780	436	msedge.exe	113
PID 436 wrote to memory of 3536	436	msedge.exe	114
PID 436 wrote to memory of 4832	436	msedge.exe	115
PID 436 wrote to memory of 1928	436	msedge.exe	124
PID 436 wrote to memory of 1928	436	msedge.exe	124
PID 436 wrote to memory of 2360	436	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://example.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb9278c188,0x7ffb9278c194,0x7ffb9278c1a0
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,9603597622723533857,3022676719965785041,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,1825290060777273346,7305125763143543241,262144 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,6638297123878739752,1516461106549701626,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,240780215333530491,4607113743295812113,2097152 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1741762433637447777,1267788351652247762,2097152 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,10924980396668576894,3577688784367681368,2097152 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,1163019566061564336,907434646276150596,2097152 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,7516499660596957198,17977631463229849951,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,17145547906766069128,14202358406172667537,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17947853314586556295,9891775534604622419,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17947853314586556295,9891775534604622419,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,15545677094495092083,14596922250739367921,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,6347623185293701981,10511083459942034042,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,7661348619945535375,8178520650346465073,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,11576691030004113205,10193535654342195885,524288 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,2186492789399553125,1826434427364153659,262144 --field-trial-handle=2288,i,1705691309926424325,16328293364487791457,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

245de0fb-c50e-4ba1-8eea-9904c47bbba6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\245de0fb-c50e-4ba1-8eea-9904c47bbba6.tmp
Size 8KB
SHA256 a0f79b7e9e2313e3ce64fb11fae7d592efa686c349b77cc8850f8d695f3c56dc
MD5 f9975acd1fe6e84e6f874335275674f0
SHA1 b2bcdd7af1d27f423c25347a5b163f28bd5d8a87
SHA512 2302939fa709e9a6003c081190ad2c6abb71a5bcb378feb367f88443432a90702000866d68c53be1dbc68465d31b1291a672fa4ab26867251db02dc6229e971f
SSDEEP 96:gqONkXQsjpfuMVwptaL5ih/cIPURHl8h4otop5CiCDmBIPuva6zx8X5Fx+xfYvNb:LONr6AmwprQmiUyS26siX5FYRkJighU6
TLSH
T1AA02FA35ED686C7F8EE3AE05B58B7B135FA4116BEA952F44CAE81B1C01D768C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25102280-06ee-4727-97d4-d7582c6621c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\25102280-06ee-4727-97d4-d7582c6621c2.tmp
Size 18KB
SHA256 8bf8df1b17135ef0e4749cce89caf9c9b6c7975a8099bc7e9ba1723efe412c0d
MD5 20988b403905b6efd59987bdad6a8aea
SHA1 3c341214485e5378274bd2561c49ca051c266c93
SHA512 cd8256d70efe0157a0fee44ffc9f86c74a7eb12e02d404e3de82ab17a64a68b14faddb5821d49227e0f173c95b06004c65efa786397f65b19bf0c14ba8fcafd9
SSDEEP 384:ZQkUSv0sN0sMn/Rpu3pwuC9iX5FEkCPJAxJ4ChrIIlJ:70nWGaPCPkJ4ChLH
TLSH
T1D0828F72F8B96D3B59D29910F14B39039FB4912BEBC81F54D9DD6B2C01C62CC5307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ee1d988-be52-43d8-9fa1-d65a53231081.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ee1d988-be52-43d8-9fa1-d65a53231081.tmp
Size 18KB
SHA256 e8105dcbf3f728aba8907371346f2e8ff07c406eace49cdb35fe5928d9b9d9fd
MD5 0eb40fc05c735ea330839e5179b81946
SHA1 418c91be702cfc5318905d42b47cc4c11c301e01
SHA512 48bac62f6939e6f27e547586cae31fe6b2318e6a09b2dc9c170389e6a0d8cd95ec5276118360e2032f7db2e56bd908541c87ff3d33b5d8931b446dcc16c72598
SSDEEP 384:wQkUSv0sN0tMn/Rpu3pwuC9iX5FEkCPJAxJ4ChrIIlJ:Y0gWGaPCPkJ4ChLH
TLSH
T135828F72F8A9AD3B59D3A911F14A39039FB4912BEBC81F54DADD6B2C01C62CC5307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f8e85e1-d42b-4102-815a-3a9a50a5f764.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f8e85e1-d42b-4102-815a-3a9a50a5f764.tmp
Size 25KB
SHA256 405a68fa4ea784df09143e3ed0f0d0c515762f8d4371f02cf128b71126b9da2d
MD5 13eec77bc6ba5fd1047813a95a33d6af
SHA1 2d301827ea92fc4d768a258f05974c10278a6671
SHA512 10a6b34c445487e65dc26c952642c0de2a353899c8ca2f363a1542b6b697afe38f0651d0868d11ea735c965f0b80b1d6977e4c8a32b7468db0cb0e8f7a3e8f2a
SSDEEP 384:LiFzQkUSvSqzsN88TUNTUlIltMn/Rpu3pwUC9iX5FElCPJAxJ4ChrIIlJ:mFdh1wgi8Ga4CPkJ4ChLH
TLSH
T149C219F298D7993AD9AE5B03A37D3D038EBCC167F9845A54B7885A1CCC861BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

37c52259-1067-464f-b07d-bec7b0bf68cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\37c52259-1067-464f-b07d-bec7b0bf68cf.tmp
Size 10KB
SHA256 0572a8dcb55d790f39907e1a4076e5e55d2200202ed03b4acc7f71a267227dc5
MD5 ff7e92c8d74e2bc036117a3bc1a8adf9
SHA1 761f1e6687712a8f11019aebd5b7d5bc76fd2fb5
SHA512 aa890f7f3a88392fed5b09dcff369de60499108b30fd76d34f0f15d9439a24c5fb5d66d3be5e8f180ffa444b1b8f5083675b9999767939ab9ace25b8c7bce7cd
SSDEEP 192:sxZdR0WF/fws750IdpSxHW6+WNBGd/Y39uXPIg5YJ:sxZdpF/fws75tiHbu/Zu
TLSH
T1F822D952EE28A97B9CCBD619BA55BF13E6F9403261D11F44A6FC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

470a6950-78ce-4786-9889-a33d4751d729.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\470a6950-78ce-4786-9889-a33d4751d729.tmp
Size 27KB
SHA256 eb602730411bda27e9e8227bbb11d7b62ddbfdef034411be5a8a7e07dfe7f1fc
MD5 1dc4b64554fc5b8823c4c1cb80acbc32
SHA1 d99852c19b1f87fa226d21a55fc027fed6d963c5
SHA512 70e4dbed4182b8fc18d1f28412f4b162489fa70832e306f6c0fd4a6a2bf55bb7c7daece44f069f562191dd3e25276ef7284267caa64bd91035d1b57d880e1924
SSDEEP 768:O230AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72NrolZMZ:O230AbSWvS2l9u1jaLmLZ12mm
TLSH
T186C2DA3B640CCB7E4FC01A9DDC6AAF9A6E9C02C796544D4447FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4cde234a-81b6-412f-a9a6-1b5fb68861a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4cde234a-81b6-412f-a9a6-1b5fb68861a6.tmp
Size 10KB
SHA256 a283916daac034cf314494fe500dc27fd6418c3e553c8987ab5b84d0eda2250f
MD5 b744ca6e08cd9fedd9563fa9b5fe1cff
SHA1 6f28c0a076c9b78cdf20f05efe308c345532a68a
SHA512 06f96fa200fc463703233292a2b8ba6502aee0f12aedaffe61dc71518a8d64fb4a092ba7c1502ceb9ec98b45692ecb39f6b45c002d6904c8e809fe7503316c5a
SSDEEP 192:sxZdR0WF/fws750Idp8xHW6+WNBGd/Y3P1XPIg5YJ:sxZdpF/fws75tsHbu/qu
TLSH
T11422D852AE28A9779CCBD619BA55BF13E6F9403261D11F44A6FC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

832d9466-4e98-47ec-af9a-401db05d9649.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\832d9466-4e98-47ec-af9a-401db05d9649.tmp
Size 10KB
SHA256 fbac331569e16832a6a9ca3a46faba2ce3387a43b07bf58707d438a14f574032
MD5 04c5c9c98f0a5b47c19b9b68cde7c254
SHA1 cdebcde1c64c12fed1c5ee5203ecd47f5372092b
SHA512 77f3447ef99c11293842d96cc637cc1c9b1c6390607cf436c3b31e6a1a1e36f33e3af4555275d539fd93946515c79562e5947c4b630212f09429040bd36e895c
SSDEEP 192:sxZdR0WF/fwsR50IdpSxHW6+WNBGd/Y3McXPIg5yJ:sxZdpF/fwsR5tiHbu/kE
TLSH
T10722C852AE38A97B9CCBD619BA55BF13E6F94031A1D11E44A6FC861C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ec50224baf5719924b23193c897f288a6002907a94d103f2c38603d1b54d0e77
MD5 2108048632902555041f707b0b943842
SHA1 6fee27c842fa2a9264bab1ec655e5e0994a1c8b3
SHA512 76c1bc2a2c45908e0ba0b70181fff20997427216bb412cf7be6f0ad13d9a2dc24ae0f661c1ae56d48f61c58c173860fc2e34dca28dd9cdb72f11ea18340c321a
TLSH
T18B616283594040A9FBFC607193F01E8F37F64E81695BBD6331ACF4A7DA06F5A9139894
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01bd75aab0a0564ca89f26fdc32f94d6129165e9afbb53e733213741227b90fd
MD5 bf2b2355dbef1d7e1afa0bed9277059b
SHA1 463fac580695223b1b0512d00b088693366d1886
SHA512 2b192a70adb6b60447e52bd2e3dae1d777c7fa913e08e03d7c47e34647ed8c59a20e475f15c6ef5bc8934a5392d95b54cef9fee1735f0d73a8614527ee2ea992
TLSH
T101618483594040A5FBFC607193F01E8F37F68E81A94B7D63309CF4A7DA06F169139894
MD5 SHA1 SHA512 TLSH

Submit Download

5530a358-1d0a-49ed-9cb2-036266a4c458.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5530a358-1d0a-49ed-9cb2-036266a4c458.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

8fd0f34d-0656-433d-a523-59b38be74211.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8fd0f34d-0656-433d-a523-59b38be74211.tmp
Size 1KB
SHA256 26c82da33bbc9d02d9733f253f310ccc055c8423e1788310c5fdffb3174ac7b1
MD5 60c4e97b55895244e0fd7bad78c88fd7
SHA1 f1e957c1600c43f60bb21e4398ac75f69afd3f4c
SHA512 08719269566f77af636e844f909675137d6259ae577937240eb075782b88cdb7cce75244fca922bafc5a333a7b04cc7e323f885ce5b752b553f1c76e0e07aba5
TLSH
T113219EB3C3D4865DC80116F0AA28BE1BCE2D091552283D2A89D4FF5BD7F2575E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

9404d059-b949-43c0-a76c-544782e6df1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9404d059-b949-43c0-a76c-544782e6df1d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c6e728d4-49d2-4346-8934-a16cdda8b45f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c6e728d4-49d2-4346-8934-a16cdda8b45f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dde8b35a3d8d3ea973ec9446ce9e201664a4475bcf3789e56bce3bacf92999ff
MD5 c7e908f5e46a97872fb00ed4a54800fc
SHA1 7776624a08e00ef2dda473a0b9ae83bb657dfa21
SHA512 105746909757ed6eff47718c79f0801d8ae77659b52e6e0067fa13fd17a7f5bf351e12ea7d862b3f10bdd652d4955800e57befacfc029177a46fe9b135c2fe10
SSDEEP 192:sxZdR0WF/fws050IdpSxHW6+WNBGd/Y3McXPIgrJ:sxZdpF/fws05tiHbu/k9
TLSH
T12622DA51AE38A97B9CCBD61DBA55BF13E6F94032A1D11E44E6FC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f15ed8268d2ad43fe24f3ae10c960c71312541e4d5d4c487c388ff0202e1f077
MD5 e6619e1253ff75e2457f653f6988b6c4
SHA1 835687ff1c04d504c3b37a26dc178b531c6119e1
SHA512 543c37b4fb559d7c4defc1505609185a999951a2920c7f82c57c20c0db171f26a13b2507211380d582283588ca1158c7618331125cda9a11bd4270b90657944b
SSDEEP 48:K0CNCsChC9CPC7C/CgbCTCmCzISC1CgK9C11CXCgxClCwYC2C3CtCtyL4neioS2P:KgfeKgYG+fSKAsf+oKDaeK
TLSH
T13D91F10431AB02117DBF295D50A4CB2A165231737218E9ABBFB991A24E6FF041DFF8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1e4e299-04e5-4372-8159-319f13813cf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1e4e299-04e5-4372-8159-319f13813cf0.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb336a69-de2e-48f8-9a32-9805ae4edd08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eb336a69-de2e-48f8-9a32-9805ae4edd08.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b14783e3-d609-4a63-b20a-ab971f644821.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b14783e3-d609-4a63-b20a-ab971f644821.tmp
Size 8KB
SHA256 96039ccee5efbc166960f0de013b42baec7b622b2b653630c5aa9a43cd2fadde
MD5 f45bc23b2abd3edf244f0b11611291e5
SHA1 1a1e6aceb2a3ee41321cd479fe24596885a41216
SHA512 219a849571f50dafc53ccb474910e957914aa63580b65f03be2facb2a38357efb1ada91b1a8cc9d36d78c4a1fc739a3a1578f24ea210f0367795a250cdc8b9c2
SSDEEP 192:RONV6AmwppQmiUyqI2esiX5FYRBJlRPq1U6:RONV6ipHxBesiX5FEBCU6
TLSH
T168121C36F878AC3B5DD3A950F08735135EA9526BEF886F94C9DC2B1C02DB5D8530A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81b3f746-65d7-42f5-a543-975bc781d895.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\81b3f746-65d7-42f5-a543-975bc781d895.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f6a0c385a2b677838a62a314671ad6266e9deb648f1b99b90df8485d52bda353
MD5 4e5bf01ab4dbbd10dbff26c83d58a95e
SHA1 1e758f9501e5fcc4b428e1f8afe54d4869f99a17
SHA512 07fbb13c792da11571a0ab6254176915cb58f394c13413e6610f89fe415d5aba4566b21dbde867f257b5010f26d755ee83981a3466aef727b9e0bbb3a37a9e7e
TLSH
T1FC415A58AAE91108B3737E59ABF6A86E487E78372F47C45D00110E8F0A32B40C972737
MD5 SHA1 SHA512 TLSH

Submit Download