19f2d1f3d3a653b16f7e4747edae371d24064c50f3427029b4de9ae951240d2e

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fghe3tj.html
Size 564B
Sample261015-ppa8fsc16w
SHA256 19f2d1f3d3a653b16f7e4747edae371d24064c50f3427029b4de9ae951240d2e
MD5 88bbcf169b4c10b0d946d85b10614589
SHA1 5bfb442c661f406d65eecaf90b11193ebe38e54d
SHA512 ff55bf8ad23c5e6b10d3160e0360674c6ed15f3521dd33ee8967fad718350a9cedd4afe5b1f5bdf43ca4c9185487f5b7515c2728b1a654533edb2ef44b23282b
TLSH
T136F0CD9F1F12287F2E238170F0C35068CF680A56FB9921E28748001F3ACA04549F6FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{581048B6-1C41-4A19-BA60-3C44B5D60EDE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4424 wrote to memory of 4392	4424	msedge.exe	86
PID 4424 wrote to memory of 832	4424	msedge.exe	87
PID 4424 wrote to memory of 4408	4424	msedge.exe	88
PID 4424 wrote to memory of 4408	4424	msedge.exe	88
PID 4424 wrote to memory of 4408	4424	msedge.exe	88
PID 4424 wrote to memory of 2296	4424	msedge.exe	89
PID 4424 wrote to memory of 2296	4424	msedge.exe	89
PID 4424 wrote to memory of 4828	4424	msedge.exe	91
PID 4424 wrote to memory of 2420	4424	msedge.exe	92
PID 4424 wrote to memory of 4828	4424	msedge.exe	91
PID 4424 wrote to memory of 4828	4424	msedge.exe	91
PID 4424 wrote to memory of 2420	4424	msedge.exe	92
PID 4424 wrote to memory of 2420	4424	msedge.exe	92
PID 4424 wrote to memory of 816	4424	msedge.exe	93
PID 4424 wrote to memory of 816	4424	msedge.exe	93
PID 4424 wrote to memory of 816	4424	msedge.exe	93
PID 4424 wrote to memory of 4000	4424	msedge.exe	94
PID 4424 wrote to memory of 4000	4424	msedge.exe	94
PID 4424 wrote to memory of 4000	4424	msedge.exe	94
PID 4424 wrote to memory of 5072	4424	msedge.exe	99
PID 4424 wrote to memory of 5072	4424	msedge.exe	99
PID 4424 wrote to memory of 3816	4424	msedge.exe	100
PID 4424 wrote to memory of 3816	4424	msedge.exe	100
PID 4424 wrote to memory of 1488	4424	msedge.exe	102
PID 4424 wrote to memory of 928	4424	msedge.exe	112
PID 4424 wrote to memory of 1464	4424	msedge.exe	113
PID 4424 wrote to memory of 1948	4424	msedge.exe	114
PID 4424 wrote to memory of 1776	4424	msedge.exe	123
PID 4424 wrote to memory of 1776	4424	msedge.exe	123
PID 4424 wrote to memory of 4588	4424	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fghe3tj.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffadf9ec188,0x7ffadf9ec194,0x7ffadf9ec1a0
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14993718122112666510,1613871574085800855,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,15912426590780234572,6628871540171746940,262144 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,17958042851952190440,5255863201494610718,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,11096645263329658880,5321779387765633813,2097152 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,16493550516204941218,385590064767311873,2097152 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,15907302575199612222,4838532270837182285,2097152 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,4433667498272921618,16075776610225247447,2097152 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,12936898089486856741,5776347293610678920,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,9554800285332314150,4998475880639346848,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16328637655641440975,1962906198774209769,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,16328637655641440975,1962906198774209769,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,14252287069405457956,4893920243161697339,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,11694775134025811248,4493425357479252526,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,14034144268688588824,14995864915638374722,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,6464140306187950355,17536538583656861535,524288 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5116,i,8775084937174603882,14181530326885108767,262144 --field-trial-handle=2200,i,10917117021480784635,10367438738218093935,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f6ce47b-cc89-427c-b19f-797d0d882166.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f6ce47b-cc89-427c-b19f-797d0d882166.tmp
Size 8KB
SHA256 fc6d9a386f337c3854cb9102d7881c25a8f59dcba7329e4e5ffba6780751c634
MD5 ac1b3975e5ad2b369b76530d15bf61ec
SHA1 206a9e5ac796430cbb1ced7d4381c8e9f1d57c6c
SHA512 e254a9770e19d4855858a3f2d6eaaae4d23ad5c3b303f10490e95ae2bb7454300d9f2d96aa2b5fbb33bc1ca26c887b03474d03aa9e5b9a8c16d9229214c3da27
SSDEEP 192:AON26wlDSQmiUycLo4X58gZdjzorkJsXh7R+2Dve5qIU6:AON26kOJo4X58Ex8kJsXb+2CdU6
TLSH
T12B121835E468BC2B5DE2A545B08736139FE69127E68A6F94D2EC1B1C01DF2AC530EC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ff27cce-a9a8-4f13-85f2-db395fb81262.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ff27cce-a9a8-4f13-85f2-db395fb81262.tmp
Size 18KB
SHA256 39a8bdf19f963d2298df9790a4f8dc7677852dc558b097a91f49086ff01d3056
MD5 04c2836f900575d3745edc89e362bd5f
SHA1 604cb9365be475462a101916bf0412793668b6cb
SHA512 2a78b2349f2189709479824409b590e6834273804d6a40fdb9b5f1e3e8023096a65958e4d915fc199d6f6979fa7c56f5eb0ca0ea7b618fcc8166952a148abce2
SSDEEP 384:bQkUSv0sNsUolOZ1BYHX58Ex8kJsXb+28dMTxEIIlz:V0dOl2aBbl8dMTxELp
TLSH
T1AA826D36A478AD375AF3A105B19E36039FB49127E6C91F58D6DC9B2D01CB29D130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bc0ba47-45db-4cf2-950d-1f5e6426d93e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\8bc0ba47-45db-4cf2-950d-1f5e6426d93e.tmp
Size 105KB
SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
MD5 1ffead718e2d4a1c853bdde71605a629
SHA1 bec748fbabd1ff5b25bcc88b57845b8ef801ffa3
SHA512 2d9d536f4d1f11cec455a2c5b7bd5485bf92d28d29a4af0c14a218e58f3db936b6de9aa72bdb015a143ce31a5dcdb74cea83b1d9addd898b44e718cacc158e4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

084bced5-e709-4a8b-8942-4955687be37c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\084bced5-e709-4a8b-8942-4955687be37c.tmp
Size 9KB
SHA256 93661f8c3562b8393b806e3cff6c439e9c256fd910c54594d947a33131d689ba
MD5 a148736d2bd32dcb70e97b40403a250e
SHA1 59c21c73e7044f150e639cf6e11ef69443c2e292
SHA512 0eea0bd653c2515f9b1c71ccb64a1282c8ab2309a367f8742005dcdfd386e8e5459760dd658a6f2a98eb1615ba10425a00bcb617d3998ed8abe26367cc12b82f
SSDEEP 192:sxZCR6WW/ffsT9IdpdQHW6+WNGYrvyT+NIg5tJ:sxZCDW/ffsT+SHbGzSh
TLSH
T1D022B7126E28B57B8CC7D20DBB55BF13E6F9503261951E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

241e7323-57f8-49b1-8f38-3dc9702a7de7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\241e7323-57f8-49b1-8f38-3dc9702a7de7.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

821b695e-b996-4195-97ef-16bcf0e55b1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\821b695e-b996-4195-97ef-16bcf0e55b1b.tmp
Size 9KB
SHA256 1b279b3f558cf81b2579b20ab13e2a3a16c18bf6ba0edcfc6996c43e2ff26814
MD5 88efd03f8967b3e1ecfef1f89cb5aa42
SHA1 9ffa05da9cc402166fb86397a3fcc9f8fa8366c0
SHA512 1032b42f0737355be8843c189763f687521beb7384ed05c62215d9add5ffb2370c42a2debc862952a60317b72e790d47b700cca6889d305288f82f019e0157e6
SSDEEP 192:sxZCR6WW/ffsR9IdpdQHW6+WNGYrvyT+NIgrJ:sxZCDW/ffsR+SHbGzS9
TLSH
T1F122A7526E28B53B8CC7E20DBB65BF53D6F9503261951E48EAFC861C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

990f0848-8b36-45e6-a40a-98cad4fe026a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\990f0848-8b36-45e6-a40a-98cad4fe026a.tmp
Size 10KB
SHA256 9f7fb6a1ff7a6dc9002435032a33920f5f5d324a601d2cccb8fdec02cb550aec
MD5 171489d3bc1fb300ee81d20d79e87f21
SHA1 739266317028d0e2645613fb02725a1b3e137c7b
SHA512 4c9b06a50175333671f0ba726ae5214471c338c4a2dab147e06d5eb4033aeaecc575e16ba7e415dc2f2f8068be1abda12c93ad6e1eb0041c7ebaefccfd90b06b
SSDEEP 192:sxZCR6WW/ffsd9IdpHQHW6+WNGYrGpT+NIg5HJ:sxZCDW/ffsd+wHbG/SH
TLSH
T1CB22B7526E28B97B8CC7E20DBB55BF13E6F9503261911E48AAFCC61C05E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 518e770f6d7e2cb3786c93d8ef2e011bc9576b8716866edfc80edf4b6b63ef35
MD5 51db4989092c98c49fc72aa5ab569b8f
SHA1 f46fdab45bcc2f53110d82c9229959cd2b6c3f51
SHA512 ba7cdde41a39344dbfc20aa0d3ffa47339aac6af22a0392312c6a6d9e87fd622842fc3deb25b46e580c33e9e026916f9af368e0a9b75f52d5ad0d05880a1ad12
TLSH
T1DD511B4126A0636CF7EC307081FA92A736B49EB2619FCE76E394F47A9946384F15502C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4a4863f366e53f7146c71b24a66a617098d400d0131154f86b444df91f8ed542
MD5 f3c271731e3c616bcaa19791b8b1cc92
SHA1 66e5d21d61a351ec258734a43918ca9519afb6c8
SHA512 5a8d16d7b333ddffb4c53c82bca6d6338560bd84ba906963f83e4a541268ae8a8c14720957238e7f477de441de5ab654efb9e4d60ecfbbe6c2ae3b3dbf663a4a
TLSH
T1CF511B4126A0636CF7EC307081FA93A736B48EB261AFCE76E394F57A9D46384F15502C
MD5 SHA1 SHA512 TLSH

Submit Download

b4070e3f-ce53-409a-bae1-9276cc8d6c6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b4070e3f-ce53-409a-bae1-9276cc8d6c6e.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1882890b-45a2-457a-9639-daff901fc540.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1882890b-45a2-457a-9639-daff901fc540.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bfe8ff8b-2db0-4e33-a7f0-d785d1a50e6d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bfe8ff8b-2db0-4e33-a7f0-d785d1a50e6d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e76a19e0-9f99-40d6-aaf5-42fed151678f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e76a19e0-9f99-40d6-aaf5-42fed151678f.tmp
Size 949B
SHA256 b13ddce2394843604962e9b87cf6c2c132176ad6642d08cdfba573f397ac5686
MD5 ada0da39697f360e3aa8040f7f8ff05b
SHA1 5d66133c25e060d2dccee3a3c7e9b608d73c9def
SHA512 f4bad9cb4c7bcce1303034a763cf80ce7c3aa1e5cc8257250312d73ea995b7888618e3bc3dd7a7311cb4c19372bd3110707272064bac5247b921b0578085cd9f
TLSH
T175117DB3C7D5866E8D1116F05A24EE1BCE2D0506821C7C15C9D4EF2B97E3075E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 0ed1ede090426ca2e32610bf05656a05360f169e6ae4e25750b893042967ad98
MD5 977fb0db44392f00eb0a5210ddd9bb09
SHA1 a680102f4f56f5b0f63dcb73fe0811df1eeea850
SHA512 e48dbad8ffa53d61988a4b248175734c70d8d1198ed72d0337532ca8a973bfba1c6dca05c029cd17cbf0be1821667ba9b67e695d1661a42d12975b6ce967ef94
SSDEEP 96:KIDCKs0+aMgKdKO2T+K42BiKK86iGQKvKb:E5PjxJV/4
TLSH
T197D1F18534BF025438BE258881B4DF1A62823177755CE67BFFBC50919A2BE085DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a36d954e-8a9e-4ca8-837a-58ce61b13522.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a36d954e-8a9e-4ca8-837a-58ce61b13522.tmp
Size 27KB
SHA256 89b25e252ab55702b707349d08a3115255916becb68b4f857e379a7399547f8c
MD5 82b7d4a4ac66ad7c7a949cc54534221b
SHA1 e8728f65bdbf51d7b02a3ccbff239c34de8ac8a8
SHA512 ab10424b51415c6dd678acd86534b29a24a87e94c1575d2b40ea34448ce0cfee18709a1bc355514521e4db4473f826b96df7dedb121b9ff25d63a3ad691dea84
SSDEEP 768:Exy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb7roRq+:Exy4J/DWvbtBhu1jajiLm0bIw+
TLSH
T1BFC20A3B644CCA7E4FC00A9DED5E6FD73E9802C796948D4047FA954C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aaff2fe5-b352-45ae-be55-014cdfcee949.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aaff2fe5-b352-45ae-be55-014cdfcee949.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c39d6210-2668-426c-b193-3d8add7cd8e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c39d6210-2668-426c-b193-3d8add7cd8e1.tmp
Size 10KB
SHA256 d72bd07b1252e14905023f11871e6c74cebb99e265e8d24e79a1be1206595571
MD5 62fb662eb99c3f95e710c17eb4425f7b
SHA1 0b3a1b337679820b0463e0693e75403aaea84e8a
SHA512 0306f51aa39abaa54486f8e8941f4f42680901144ec482006317efc173f2d030a11058994328378b47e18f50917626d8a7d3de515a9d611beaece25e70b1fd2a
SSDEEP 192:sxZCR6WW/ffsd9IdpdQHW6+WNGYrWiT+NIg5HJ:sxZCDW/ffsd+SHbGsSH
TLSH
T15222B7526E28B97B8CC7E20DBB55BF13E6F9503261951E48AAFCC61C05E7ADD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a1f9c9d2-855b-45cb-8847-d2c5693ff0c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a1f9c9d2-855b-45cb-8847-d2c5693ff0c9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a49499d7-3d7e-4238-b242-9f3db6ea515f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a49499d7-3d7e-4238-b242-9f3db6ea515f.tmp
Size 8KB
SHA256 2cf548f656d2218c4575a733085405c80b9aa09aece1e4757f38cac511b76bbe
MD5 9b46b3e87803dd6703b2ad728a4a86f9
SHA1 b2978bc3fb87d0f7ea858a1ee75eb3b6fda104f6
SHA512 c13c6de03890ef3419895484a48a739a9bb391cb27897924abe43a99e9b76aa247cdd283c0125eb67f26d7c3586538ccdf0919746a19926f0e640d71b60458dc
SSDEEP 192:1ONg6wlDgQmiUy5LW4X58gZdjzorkJIDlMIeU6:1ONg6kgSW4X58Ex8kJs+U6
TLSH
T19802E835E9787C6B8EF3AE0AF48627139FE5112BE6552F44DAE81B1D00D729C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2a278c9-2990-4e88-82da-07d9d9272ab6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2a278c9-2990-4e88-82da-07d9d9272ab6.tmp
Size 18KB
SHA256 07a19d63178b18b18d2561fd22060e3ca3aebb950be56e8a7b8c25542c4d079c
MD5 c370cf69e571fd547ce5044ae390e53a
SHA1 1a383ed4c0bbe5fa1c34e4683b8cb92248f580e7
SHA512 73c78fa5ffea38727bb962da46dc621ea0c4c0336f7f531f34159ec95dee58ba349628c983b19db5d8c5d96be0fdf9838812bf88406aea57cb4bc197ffd216f9
SSDEEP 384:HQkUSv0sNsU5lOZ1BYHX58Ex8kJsXb+28dMTxEIIlz:Z0YOl2aBbl8dMTxELp
TLSH
T108826C36A478AD375AF3A105B19E36039FB49127EAC91F58D6DC9B2D01CB29D230BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c78adf14-58e7-4c28-82ce-7ef124d584f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c78adf14-58e7-4c28-82ce-7ef124d584f8.tmp
Size 21KB
SHA256 bc5cc0fd0a17680cbcbd91d129dee0de6bc90e45b13d1c447e4e179ca1f157ce
MD5 2c901c41be2881b4895ceb37f7ed786a
SHA1 ba04313e930a6e7e7ec64d1fdbfbcd0d9bc89af4
SHA512 707a7165ad72cf0b514b0dc3823d6a52ac70fc305ffeb92348c01f7319aad20a95af4428b300758d8b96f501acda63d26edb6471a09674b4fcef9d3d8014fa2c
SSDEEP 384:9iFzQkUSvlzsNt8TUNTUlIl5lOZ1BYHX58Ex8kJsXb+2BdMTxEIIlz:0FddEwgBOl2aBblBdMTxELp
TLSH
T139A25B32A8A8AD3B9EF79A05F15E3203CFB59167DA856B54E7D89A1C01CB1DC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 59cb6f8a475064265d36a2303e7b60a8143bf265f188fea90cddc4a45ff4b768
MD5 fe972f7dc552395da0de5741122b3df3
SHA1 7c314768d9208dced87a7c5f1e52990d8b136ba6
SHA512 d552e92bde371653de1c4e68e89af953cbdcde211c6ea01e0d63bae1a1a8d696c7b78010ecd9c6a81ebbd405a57978787701367967c077583464f9c9dfde18cb
TLSH
T12E41244CA6E91048B3B7AE4AAFF7A86D08BBBC732F06D05D10110D4E0A22B01C8A1733
MD5 SHA1 SHA512 TLSH

Submit Download