ec49a98a5a05263469244cad3ed611b86ed7c331e42a66495cd29dd5bb5ddfb7

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
authentication.html
Size 3KB
Sample261015-qstdwabt5j
SHA256 ec49a98a5a05263469244cad3ed611b86ed7c331e42a66495cd29dd5bb5ddfb7
MD5 b62b3bd458c3b2ea14a8782bd3e61cc7
SHA1 177b76b447637ac7ea8fc48616b62a77f8f5c8ae
SHA512 4f314be35d9e595ba078e15e5fb427e8a83b9826549e944070b19a71dbf5ab1d6176fb5dd9483e97ecd4a31d41b5d8d5f3385f6fbb5dc0ed9e400df40fe8bbf5
TLSH
T1A85154851DE250257413886E2FBA22167682C407D34FDD263ADD96BCEFC59D08EB23DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3704	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{56F8416B-14C7-4AF7-8391-7BE771A346B0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3844 wrote to memory of 1356	3844	msedge.exe	85
PID 3844 wrote to memory of 3704	3844	msedge.exe	86
PID 3844 wrote to memory of 3964	3844	msedge.exe	88
PID 3844 wrote to memory of 3964	3844	msedge.exe	88
PID 3844 wrote to memory of 3964	3844	msedge.exe	88
PID 3844 wrote to memory of 4264	3844	msedge.exe	89
PID 3844 wrote to memory of 4264	3844	msedge.exe	89
PID 3844 wrote to memory of 3612	3844	msedge.exe	90
PID 3844 wrote to memory of 4416	3844	msedge.exe	91
PID 3844 wrote to memory of 3612	3844	msedge.exe	90
PID 3844 wrote to memory of 3612	3844	msedge.exe	90
PID 3844 wrote to memory of 4416	3844	msedge.exe	91
PID 3844 wrote to memory of 4416	3844	msedge.exe	91
PID 3844 wrote to memory of 3904	3844	msedge.exe	92
PID 3844 wrote to memory of 2400	3844	msedge.exe	93
PID 3844 wrote to memory of 3904	3844	msedge.exe	92
PID 3844 wrote to memory of 3904	3844	msedge.exe	92
PID 3844 wrote to memory of 2400	3844	msedge.exe	93
PID 3844 wrote to memory of 2400	3844	msedge.exe	93
PID 3844 wrote to memory of 3040	3844	msedge.exe	101
PID 3844 wrote to memory of 4692	3844	msedge.exe	102
PID 3844 wrote to memory of 3040	3844	msedge.exe	101
PID 3844 wrote to memory of 4692	3844	msedge.exe	102
PID 3844 wrote to memory of 2568	3844	msedge.exe	105
PID 3844 wrote to memory of 5028	3844	msedge.exe	111
PID 3844 wrote to memory of 5064	3844	msedge.exe	112
PID 3844 wrote to memory of 2364	3844	msedge.exe	113
PID 3844 wrote to memory of 2904	3844	msedge.exe	115
PID 3844 wrote to memory of 2904	3844	msedge.exe	115
PID 3844 wrote to memory of 332	3844	msedge.exe	123
PID 3844 wrote to memory of 332	3844	msedge.exe	123
PID 3844 wrote to memory of 2840	3844	msedge.exe	126
PID 3844 wrote to memory of 2840	3844	msedge.exe	126
PID 3844 wrote to memory of 4428	3844	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\authentication.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffb4585c188,0x7ffb4585c194,0x7ffb4585c1a0
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,1868998854404873759,14942712299954733195,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,1036785517384439233,5232783919146733111,262144 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,183299108214509800,14482165957683205350,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10851772521189632720,2428065467986227717,2097152 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,2202878996321811431,15480975371551761115,2097152 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,3750376491662918906,13064257709755849195,2097152 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,13144744619152502453,565410274011334073,2097152 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,3082481899175429653,15695233540955321537,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,6342489689710611184,17037877968889369349,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,12509151778941497539,9595268320679430740,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,12509151778941497539,9595268320679430740,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,10101830676725556144,2408239981561279409,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,3096176061207744770,16985639492780247449,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,6541261178384075614,12550403727052262907,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2820,i,15664056877963453817,9243382240021306592,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6199872990884807380,7927617090396218564,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=772,i,16340240974820955630,4139986719939670628,524288 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,6747747455067785454,17773220412176122001,262144 --field-trial-handle=2288,i,7240800241626379532,2402636613675231977,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4bb92bda-7097-49b4-b63c-958402ffdb4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4bb92bda-7097-49b4-b63c-958402ffdb4b.tmp
Size 8KB
SHA256 fec00fc0d9e7599ac2dd1638671d17ca80cb17295e1b817f4f9510a2cfd5a3f8
MD5 30493c4c536c2a53114b7360637a49b9
SHA1 35398a2185c9d61b3fd6e2a62f2df70aa04cdcbd
SHA512 a5aec65860167d5df3ca5f80e1a2f353d533d26c20e52a9c0388e5be6de8c07df418c5209f0c02afd1e6c8e31f61405044bb811601832c9f2673045b5694a3b8
SSDEEP 192:EONs6nnHGQmiUyC3QYcX5hQDP12jzor21mfMcc0U6:EONs6nCFQNX5+Dt68D1U6
TLSH
T18A02DB34ACA87C7B9AF3AD49B4862713AF952137A5952BC4DAE81A1C00D769C2316D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90d363c2-5e25-4c34-91dc-f8e505818fc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\90d363c2-5e25-4c34-91dc-f8e505818fc4.tmp
Size 18KB
SHA256 8c2e91bafbae5b9e706c0eb1c8d69a80d380ee83886a178823db36b8dda27bc3
MD5 7040a0be8109b980828ec83f87395e9b
SHA1 9db12d2f8847c6222b9a28b3d8e6fb770a57c8e0
SHA512 127b4712e7c415657eea0b28119132c7e71b6dc11f0da73179d7bdc5180d39d6c084d3629150bceadc13936001e90a366b808bb10f60d72e8c5132e6ab64da29
SSDEEP 384:GQkUSv0sNq4hOlLmi8nsQX5+Dt68xXu1mwMTWOIIlf:m0nKvnkDH+mwMTRLt
TLSH
T15A827D356CA86D274AE3A685F15E3213AFB4A023DBC41F84D6ED6B1D01CA6DD2317D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dce2cff0-4e27-430e-b69e-3e3ba42c3094.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\dce2cff0-4e27-430e-b69e-3e3ba42c3094.tmp
Size 105KB
SHA256 faa1d17dbaa7275c5bf9f5f85c56bfd5886f17e7f8b00784101de8f5c039c356
MD5 d8b17b6bb640bff8fe28ad44a747f3d3
SHA1 42af3c2e122da92ce166cc222fcb6c05cc8e472e
SHA512 bb4055fb646199a59be3e4d455909dff93e1c0cb13653477973c3a58336f13da6f23290ae834b4b70337e52f6ad5c4ba63776e096e692279fc99eb7436a85abb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7b:fwUQC5VwBIiElEd2K57P7b
TLSH
T1D7B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

1082cf58-1a59-45c6-9bda-5f95a23e6438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1082cf58-1a59-45c6-9bda-5f95a23e6438.tmp
Size 10KB
SHA256 a80fdc8625b3890c80c585deec1c96fd71b82e492debe55071d3e541c4f1bbd5
MD5 5420f227815f8032562e476fb223db51
SHA1 77e06ad6a0b94f2db7d1adf6ecd2c54661143b8d
SHA512 60c992cf483660315238aea1c7914fdfd3409910674d88ff6f0945cead15e4b09aaf12fab742d26a573a854c43cfafe8ddb940213a854f8fba9772524c8b6938
SSDEEP 192:sxZ+R9Wp/fushUaIdpd/HW6+WNGYYBr68gIg5QJ:sxZ+Kp/fusazVHbGfky
TLSH
T1BC22E8116E28B67B8CCBE20DBB55BF53E2F9503261911E48A6FCC61C05E7ACD221741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50fb4deb-d255-4073-88e4-a19545ad5c07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50fb4deb-d255-4073-88e4-a19545ad5c07.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cdf1d56-f99f-492a-902b-ff9456722a38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8cdf1d56-f99f-492a-902b-ff9456722a38.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

95e12c4a-b5fe-49af-b874-98cfdf113ec9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95e12c4a-b5fe-49af-b874-98cfdf113ec9.tmp
Size 10KB
SHA256 36c9fbb9d31d3d05d74bd0465b8f8ae284d3fa8d309e1cf86338c769da1b93b5
MD5 f483728ed64133a75f59cc43a8c3293a
SHA1 2c5d761ee34f38f36e12883693b9e92383a8df91
SHA512 87e6ec3bba480dcb9db15514694e3ae862dd1c0bae3d2a1180f804d367f90ed1787a1834d9c41ba72d66ffd9621b49a08b678fc4df984b6aea29054e1a1f3ce6
SSDEEP 192:sxZ+R9Wp/fushzaIdpd/HW6+WNGYYB1Q8gIg56J:sxZ+Kp/fusNzVHbGfII
TLSH
T1D022D7116E38B67B8CCBD20DBB55BF53E6F95032A1911E48AAFC961C04E76CD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 68b9a963896bb7ef5f991e154dbee7babda39f830aace5335e134f3e5f3fddce
MD5 ed48554522483e7ed11276cc82615309
SHA1 4d3a957d31d6dcb61d5c05d9f317011e2c2f2932
SHA512 8edba6d2a7485ad8c78c5d2b60b3558524e9bacc6ac02668cf6d181c421298d113561d4ecbcee8d1eace811b0e05c5fabb8e43b9e136b091cb04fa86636ff13d
TLSH
T194E026C504CAC22EE309A68781BC530CD38127BED2C8E90F5704C5C8708A240B6C66D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 41bd5e2aa6a04b29e28007a5e7d5a0306b6422bf0848bada1400889fc66e19d2
MD5 35223c6cfd7019d19929c5ba3af06162
SHA1 e2eaaba83c78695b2f0fe9138116b7c45a98d1aa
SHA512 e67e86432563ade00600484bd0a7c9fa359f96531521b66f0a5b6a65fd8e74024e64ea76f95bac0b5f6632016ebc958f9525c315fc7ba6f27ebb27e9977b9c05
TLSH
T194E026E944CBC22EE308A78743B8630CD380676FDAC0E90E2708C5897146749E6A6694
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 865e1c65d33c9ae408931d67cda5abe3c627a98214d51f283895b3c40a887b95
MD5 eaabdb3445a6cc84c0bf1fb3fa235ea6
SHA1 1931586f4abc2c72f359e5a9607d5b79422fe7b0
SHA512 45a2cdeaa210de5b1c1ab7dd27d3847f3de2727fda6c491ca1368304afb99c2b1a199de5ff066c35f2ee3f6acbaa63845987afde21d9826c7e07f3ccc1388517
TLSH
T12F512DC25691A895F3A810F6D1EF138336BC85A25A873E830398C8FC48C7B0F809C25F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 652f2135dfc0e09d826d6bdd3e33aa24eb854bd1615db22bfd6f3784ed9cbd61
MD5 0d635d25371d546538e03d641758f891
SHA1 ad41c8626a9cfd49c484ab78d4361f562d393d24
SHA512 9fc9974800dbe15d667744bf733e7cd547f5e7d16ac3c6a418f5e3d776406c7acd583392f9e76f5872cc6fd0c37be092a3d56c91ed1e789b0a53fbb9b15bc9aa
TLSH
T1FC511DC25691A895F3A810F2D1EF138736BD85A25A877E831398C8FD48C7B1F819C25F
MD5 SHA1 SHA512 TLSH

Submit Download

b635899b-b803-419c-9f66-225ecbc6fdff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b635899b-b803-419c-9f66-225ecbc6fdff.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4778d9eb-68b8-46a1-a4e1-45381517533c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4778d9eb-68b8-46a1-a4e1-45381517533c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

5bf38bcd-63f3-46f9-b4ef-0f7d81a1baf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bf38bcd-63f3-46f9-b4ef-0f7d81a1baf0.tmp
Size 949B
SHA256 ec6554709a6b07c48f1116fdcbcfc08f6e6fa4464f1b6b95c3efa44360ac83a2
MD5 fd0bfafe50601868e602fb4049918b39
SHA1 e47f4461a70084ef4ffaa8f0450f486d2c9ac2b5
SHA512 5710108e0e7aedbf4d1bb7408c920fb534cffb1b514626c61bea4c67faaaa205faa7638204256a2b3333c4d5a5a5ccb614fd9e47b2dc800d80fddfca017501ff
TLSH
T170117AF3C7D5866E891116F05A24AE2BDE2D0606821C7D1AC9E4EF6BD3E3079E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

ffefc026-f7bf-44f8-9aef-8e6c9cdb7462.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ffefc026-f7bf-44f8-9aef-8e6c9cdb7462.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b36df70c7bc95734349f5dc02dd3a60454ba2990b7d214a4a77cb7de02491132
MD5 48c555beeea514fe293f501031c19011
SHA1 31e980f1b0bbdad12944eeea5cd985a3961d9b92
SHA512 d6d25a50f14543819252924ec6285e61b788a7622d5cddefd8c87977f45ea99806e63e8fb3a9c40e23cff32448486c1654fa9339dc30904a5a337baf5585b7f2
SSDEEP 48:KgFk51Hznob7+7ISNoK9t1foxt4Yuf1lyLuJkomscVbgnoISAVK9k12VxOFYfgcx:KY+4K/K6ud2K2U6uTyK4oZ
TLSH
T18091AC1335A7020039BF258890B497AA064235F37014EA2EBFBD09D58E6EE185FFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf3baf4b-254b-4d9d-b02f-596f806b935d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf3baf4b-254b-4d9d-b02f-596f806b935d.tmp
Size 27KB
SHA256 739e4df96a132d87fab2a535e1570521a80bb8f6a9249615d9ae57ae61a8895c
MD5 4e6517565d1d7d95149e8d3db2f7bf0e
SHA1 f2f81db08d1893215fc72ae72a55aa744b9abf3a
SHA512 94e9ca79254e74de0e1e3c5265b097288b779667e4b3519a335b7c91bcfbaf8ecab510e3e50dd29793264e22ed336d08704aacfb99c32af192c3c26879c87d6b
SSDEEP 768:bhqryYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvXq9ropSRP:bhqryYR7jWv3NpBu1ja/CL8OXq20
TLSH
T107C2E93B644DCB7E4FC01E9DDC5A6FDB2E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d59f8f6e-3809-47e5-90a4-4424a81a1aad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d59f8f6e-3809-47e5-90a4-4424a81a1aad.tmp
Size 9KB
SHA256 05c33847fd554346f8ea2bcf32873a41bd16a5530b0cb327fc0771b703f0d8fa
MD5 60355be1e7e2a5879dc965eff5c75b38
SHA1 02ec02f1db00ccf71ea40d7a29b25abece3f3164
SHA512 6016aca48ae09bce4f1a1057b4dd5020c1bad12233647200f4a9b7fc568263704814daec99246e59c05bd49e08e32fd916fbe6fe908ffb6e2d82525415258c89
SSDEEP 192:sxZ+R9Wp/fusXzaIdpd/HW6+WNGYYB1Q8gIgrJ:sxZ+Kp/fusjzVHbGfI9
TLSH
T13C22C7116E38B57B8CC7D20DBB65BF53E6F95032A1911E48AAFC961C05E7ACD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa26d49a-346f-43d2-9b3a-8c2b3f233270.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa26d49a-346f-43d2-9b3a-8c2b3f233270.tmp
Size 10KB
SHA256 00a75f7c0d9ba5890447f569800da8dbe13a1b387991928389c2d8587234ecd9
MD5 998d6f1d53e743a146a3ca082403c042
SHA1 c66d33f6fc10451fec9bc1f508c0398113cba00f
SHA512 c1c0291958f6676ac40c67ace76fa1bb50d2198e1e9a0156aca37f681dbb086f013df6bfa04229f4fd1b01aefdfd8caebdd9a827863d102372c2b8daa9e74b5e
SSDEEP 192:sxZ+R9Wp/fushUaIdpH/HW6+WNGYYBEpYgIg5QJ:sxZ+Kp/fusazfHbGfsy
TLSH
T10322D8116E287A778CCBE20DBB55BF53E2F9503261911E48AAFCD61C05E7ACE221741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

dff2c835-5675-48ab-b536-63747fe3dd6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dff2c835-5675-48ab-b536-63747fe3dd6c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0fd0d87-e857-4c28-841e-537459470a8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0fd0d87-e857-4c28-841e-537459470a8a.tmp
Size 8KB
SHA256 c2396369977cfa7151d24f1e3545983c319c053c0adb7204f553e61301e40605
MD5 4e5c79bcb8af65a567ed2e7b8eeaca63
SHA1 42f672fbec9543bfe4f16796a517c6b0c332861c
SHA512 5734c5f724f919505d2f3210c221c5e67ff54f0ce520fc801087dd14e61305d9f31efc9c0d5c83f9289e00493ecad3003302fe04a5dc8369e5076a1da85b68d1
SSDEEP 192:LOND6nnH2QmiUyC38YcX5hQDP12jzor21mxXuMg3Vq5lqU6:LOND6nyr8NX5+Dt68xXuHmwU6
TLSH
T14E12EB31A8A8BC675DE3A585B08732136EA55137D6497FC0D6EC2B2C01DF6AC531AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d035b8fc-eb6c-4108-a124-07d529e45170.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d035b8fc-eb6c-4108-a124-07d529e45170.tmp
Size 18KB
SHA256 6c78dd767df90a5c42f0dd882d48e8f9349593b54c45f34130bc6fd8d5302cba
MD5 8ab1df9e05d652842b2ee18886b02cfb
SHA1 5edba0388a39457adef7fc784e9ba94a1332720c
SHA512 59138cdff5ba3037fdb78310acc3fb26b45d791d976d7b79442ce42b0529a6d17d12cce794fb7bfd86af01e43a056d32b7d93537d0f9b5a38e00228524ea1151
SSDEEP 384:GQkUSv0sNq9hOlLmi8nsQX5+Dt68xXu1mwMTWOIIlf:m0MKvnkDH+mwMTRLt
TLSH
T1EF827C35ACA86D274AE3A685F15E32139FB4A123DAC41F84D6ED6B1C01CA6DD2317D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d98ce347-b734-4f60-960d-f9307d2d5bc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d98ce347-b734-4f60-960d-f9307d2d5bc9.tmp
Size 21KB
SHA256 19e2e557a5fc4865e8e21f43def08b09f158c7bc40799a7f8e07b45857cea7cc
MD5 b2f152e47f5a6383229cee00d8090449
SHA1 e57639807a91f7c0db9e967a675b7c496ccf2c19
SHA512 b468e0973e5c7cf0528faf46e94f475b9dfb97cff76ab135aae36e37059746ae97f61b48dfe9bc7a9b17610f2d7ae4c262df1190a230feea0dd38a6cac61ceca
SSDEEP 384:xiFzQkUSvXzsNy8TUNTUlIl4hOlLmi8nsQX5+Dt68xXurmwMTWOIIlf:YFdDjwgDKvnkDHSmwMTRLt
TLSH
T178A26C335CD8AD2B9EE75B85F15E3203DFB45073CA856B94E7D99A1C018A2DC1307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c35df01c-270e-4350-a30d-3ea8a88a907d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c35df01c-270e-4350-a30d-3ea8a88a907d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 181b17cc039a1e8c73128290ed7f94b9452425cdca0bdaa4faf05704d1b92194
MD5 621fcb1b837a2fce4debc0d9a89856a8
SHA1 b0b7bbcc8a180ffe57244e432df873e339c65686
SHA512 356bb72f9572cbdbbf92a72a83f12d2142b15cfd90ce9e90673fbde651afb4347155313379fb30a4a77a40638e8e1857ecad99189337eba718831c7f09ba1395
TLSH
T1E0412D5CA6EA1158B3B76F1A6BF6A46D487B79372E06945E10010E4F0A73F00CD61B33
MD5 SHA1 SHA512 TLSH

Submit Download