9d7a55c392fec083a71fbd74b63e6842916ca26f0c23ae3380ca7b3fc1ca8967

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 06:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 19KB
Sample261017-hea2dadf28
SHA256 9d7a55c392fec083a71fbd74b63e6842916ca26f0c23ae3380ca7b3fc1ca8967
MD5 3aac7b56fd046adaa1e9d42f1e5cbc27
SHA1 8239d5c18e39e9093f1c73eb5fc164c96fd095dd
SHA512 43c8060d5cd10ba4d19c9f9ddfe823d167894d84dd9c7a9e80c55ec8270451634267f921779c097e49c6d24db54e7529bcdb4f40e2e42312f0ad788e1473aeb3
SSDEEP 384:/4wrNVO6+XuDT0yuerQUEuCWjCdzdV8M7Hj9:g6n0ve8UEOCdzdaMbj9
TLSH
T19992336698F41517025292A568E97A1B7E95C20BCF4B2E50B2EC0FBE0FC6ED7CD2311D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{898BC883-8D74-423B-B342-3044D303A79E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5076	msedge.exe
5076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 3300	2100	msedge.exe	86
PID 2100 wrote to memory of 4900	2100	msedge.exe	87
PID 2100 wrote to memory of 2716	2100	msedge.exe	88
PID 2100 wrote to memory of 2716	2100	msedge.exe	88
PID 2100 wrote to memory of 2716	2100	msedge.exe	88
PID 2100 wrote to memory of 4508	2100	msedge.exe	89
PID 2100 wrote to memory of 4508	2100	msedge.exe	89
PID 2100 wrote to memory of 828	2100	msedge.exe	91
PID 2100 wrote to memory of 828	2100	msedge.exe	91
PID 2100 wrote to memory of 828	2100	msedge.exe	91
PID 2100 wrote to memory of 2248	2100	msedge.exe	90
PID 2100 wrote to memory of 2248	2100	msedge.exe	90
PID 2100 wrote to memory of 2248	2100	msedge.exe	90
PID 2100 wrote to memory of 3140	2100	msedge.exe	93
PID 2100 wrote to memory of 3140	2100	msedge.exe	93
PID 2100 wrote to memory of 3552	2100	msedge.exe	94
PID 2100 wrote to memory of 3140	2100	msedge.exe	93
PID 2100 wrote to memory of 3552	2100	msedge.exe	94
PID 2100 wrote to memory of 3552	2100	msedge.exe	94
PID 2100 wrote to memory of 4588	2100	msedge.exe	97
PID 2100 wrote to memory of 1368	2100	msedge.exe	98
PID 2100 wrote to memory of 4588	2100	msedge.exe	97
PID 2100 wrote to memory of 1368	2100	msedge.exe	98
PID 2100 wrote to memory of 2072	2100	msedge.exe	102
PID 2100 wrote to memory of 1780	2100	msedge.exe	111
PID 2100 wrote to memory of 4016	2100	msedge.exe	112
PID 2100 wrote to memory of 3296	2100	msedge.exe	113
PID 2100 wrote to memory of 1408	2100	msedge.exe	115
PID 2100 wrote to memory of 1408	2100	msedge.exe	115
PID 2100 wrote to memory of 5076	2100	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff1e38c188,0x7fff1e38c194,0x7fff1e38c1a0
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,2025458916078120698,11139381771393277382,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,17687811139963667906,16619795865132229434,262144 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,4805759557734602101,11272702511943589217,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,1600140001912665285,1313139171296720487,2097152 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,5231250510268309974,12799841352293745777,2097152 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6437794027636212983,4756058810917352977,2097152 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,7060931691249264334,11885102797821977055,2097152 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,9682668393851990247,9222955875814736639,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,10962497638506810941,3349213413180002685,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16634415602763283188,8683707732600655863,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16634415602763283188,8683707732600655863,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,17328274281753968947,319520446777554412,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,5076724747372615902,7400811405925418798,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,3073063141300541867,9813823924179696202,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,11648260054383814505,2070206527812864072,524288 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5528,i,7615608584034509333,2143615797239004262,262144 --field-trial-handle=2296,i,885821068761859320,1949856029217652490,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

31daec50-344c-4b4b-b491-848e91fbfa3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\31daec50-344c-4b4b-b491-848e91fbfa3d.tmp
Size 18KB
SHA256 54534be439f34e8703d5f36080bc992d0413742fab5ae54c53631cc05ef374ce
MD5 078f9c353028a9d79e2078726b9a9c05
SHA1 ec63afde4cedcb56fe1de3d9b05ab53415469479
SHA512 faf66148412430d5e03977ebc03c372b58feca5318a4b495908bbde63849330ae28371f850c5f241ef0c16a381472c1350b7c96cd69e53117eb5399e72dacf7e
SSDEEP 384:3QkUSv0sN8ET5Lk2TBGYX5ECm9TDipMTHIIln:J0U9HdGYuCwHipMTHL9
TLSH
T158826C75ACB96C6B4EE3A551F48A3A039FF89127DB841F54D6CD6B1C01CA28C230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66216218-8e2f-4487-8f70-33f01c3a069e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66216218-8e2f-4487-8f70-33f01c3a069e.tmp
Size 21KB
SHA256 c9ec355ae3fe360231aa3289d727471d8fc8ca51d606a7ba1a3f5a8a50fc8ea5
MD5 697511aa049714bd53b06abe08361dfa
SHA1 b608276d7c91aa4d72e194e12324a2843dbfa5e3
SHA512 db8f971868a3ac6e6227cf5c931e9fc5ae90c6ed4e5b871d83798e778bb60a11a6273baa8d8868cac0150bc70aa2d7f1070f585e4b3f2f1c00867ff334e51546
SSDEEP 384:ZiFzQkUSvubzsN08TUNTUlIlET5Lk2TBGYX5ECm9TDipMTHIIln:wFdqJwgC9HdGYuCwHipMTHL9
TLSH
T171A25C769CA8AD7B9EE75E50F54E36038FF49127DA806B54E6CD6A1C01CA2CC230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a46c579-0c8a-4fc4-8350-30f6d1c4cb89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a46c579-0c8a-4fc4-8350-30f6d1c4cb89.tmp
Size 18KB
SHA256 b8caaf10538f46715ad3534b13c00f45d14d006294a5de9a87b26a094437e6e9
MD5 023796c89236559bbe02fa747f4d2c55
SHA1 6e49267b57cce6390066cf78444740e9381c2a59
SHA512 69b2c8df7195c58b371798a559e1997541d311994273bd6b33cdf7a345fe4b4b837fbc774ec59bec5cda2bae8da372bd89c2768f383d7fa19ddc6e98607aa973
SSDEEP 384:/QkUSv0sN89T5Lk2TBGYX5ECm9TDipMTHIIln:B0l9HdGYuCwHipMTHL9
TLSH
T197825C75ACB96C6B4EE36551F48A3A039FF89127DB841F54D6CD6B1C01CA28D230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

3ec81048-edb6-4545-b690-490ae9d43686.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3ec81048-edb6-4545-b690-490ae9d43686.tmp
Size 10KB
SHA256 d952028ae08215fe88cc991be43004560d433e27660991f98f84dba42c406ef8
MD5 b55f3bf0bd3a22d6877cfbae9042a656
SHA1 7a56e59d736b88d62e27fc119370dc3086612747
SHA512 6e6aa6ccfa9a871e526649f3ba52cd79887ee09209ec2095136b4ecc24666c8052240c8865ae6c47322f147e4c9e271292ce602c8117f65ad3caca8e6b1c09ee
SSDEEP 192:sxZNfRSW0q/fUfs3SoJJIdpd5HW6+WNGYgxJ4HjyIg5lJ:sxZNfX0q/fUfsrJC3HbG5p
TLSH
T18322B7116E287A7B8CC7D60DBB65BF13E6F95032A1911E48A6FC971C05E76CE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5598df4f-c0fd-4e3b-87af-f879fa902eab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5598df4f-c0fd-4e3b-87af-f879fa902eab.tmp
Size 9KB
SHA256 8f8d22075db3c0b6b8f91dee8d59c3e3c65e976246e74a09c44d5d446ddd335c
MD5 d5479b108335877609014d1e83a38236
SHA1 1dac8be74181251ad5e088c918766363ecb87a2d
SHA512 e9adc43059dbf6fbdb85fc4f546394b1becc228714944a889a88679debe711f7c3afbf5b448a3fefcaeabc911f8c56b3aff9edd05eed7b53b61b0ef89dc28f59
SSDEEP 192:sxZNfRSW0q/fUfs3LoJJIdpd5HW6+WNGYgdcHjyIg5XJ:sxZNfX0q/fUfscJC3HbGX3
TLSH
T1B822B7116E387A7B8CC7D60DBB65BF13E6F91031A1901E48EAFC961C05E66DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a9c74f8-c463-4680-96b0-4caa7e3e7b63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6a9c74f8-c463-4680-96b0-4caa7e3e7b63.tmp
Size 27KB
SHA256 f810fac7525bfe0dc1be8659e52ccfff4731a00bb2be80a9c027bd6f9321f7fe
MD5 99f060ea5bb84650d8e0f44d32eb6b40
SHA1 28e85f78448f68423369ef8aee91d5150ce51b17
SHA512 505af8d19735879b018beeb8706ce2e449503fb3aa17b1ed7ce7f6d0400edced4e152c53a6ad4b9f4fba21f42711daf40544289d126ea3bbf43c4906de7700a4
SSDEEP 768:mEXMichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzXMroeH/C:j8ichfPWvPZplu1jan+LKgznefC
TLSH
T11FC2E93B640CCB7E4FC01A9DDD5A6F9B7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 981870e05b11ff5ae85b4809d6a8aaa5cc4f6aea4fcca1e64b57bb9631f1e557
MD5 1efc7b48d4a86eb1ec920795b9e02956
SHA1 9016450d21c609c33f96bac7f7720b424e2f821d
SHA512 9db8d612af4c73facf501b7bd0eac67cd3591335fbdca7b65313bcd31b7d78ff69f7df7ea88b491482ade19aaf2064ab37a98ab8f863ef1394ec6a9c03c59f2c
TLSH
T1D661B5CC454180AFFF9480789DDE70CB37365D827A4B4DF38198D4B6A886BD4C28A890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e38e7a8efd1dc8182f62587463f339d1d9936541a33ecfdd083b16dad9e83662
MD5 571213f0d0c7a0ef6481a1b116ba3ce1
SHA1 b9f961c7b5245ef03b52195f9f86b1afa49d1d5d
SHA512 61ef8cb56e3256be9dbabf83b7647bf0429584f7b39acee28f94dbc5d8b6a048827df15e101dc2b923a89c14ee47f8e8f4c843895963625ff120ba5294198c83
TLSH
T12661B5CC454180AFFF9484789DDD70CB37365D867A4B4DF38198D4B6A886BD4C289890
MD5 SHA1 SHA512 TLSH

Submit Download

7f85225f-b53e-4f8c-bac6-2240251cbe3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\7f85225f-b53e-4f8c-bac6-2240251cbe3d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

1a7150af-f156-454e-bb3f-0a6f4acd80f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a7150af-f156-454e-bb3f-0a6f4acd80f7.tmp
Size 1KB
SHA256 62ab6eca624618795111d63b12aad6fd36901aee04b8e846f45d321ba1c7e26f
MD5 95dc15d83f8357bee7432dc1f9c4d8e9
SHA1 5598adddbbefb875bbf6e4a38af3d88e1ed12635
SHA512 dce902856709eba84e8a36da5b9983501fc7cc5b0dedc380dd4897f31ee39e292f831a02d0cbde7435ae2028cbf3dd44b061984e6e78ef8c4828399148e77635
TLSH
T16731ACF7C3D8866E881156F09A24AE2BDE2D0516422C3C1AC9E4EF5B93F2471D20269F
MD5 SHA1 SHA512 TLSH

Submit Download

c7ae74e2-b78b-4ef6-9a87-bac0613aff4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c7ae74e2-b78b-4ef6-9a87-bac0613aff4d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

d4d89e1a-57c2-445c-8f13-9ff44650bb14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d4d89e1a-57c2-445c-8f13-9ff44650bb14.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d54fdb9d-1a0f-4be4-b631-1080b82b2d0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d54fdb9d-1a0f-4be4-b631-1080b82b2d0d.tmp
Size 9KB
SHA256 0cc1c6e9711c5f0878a1bb5c7503ace3c208b1e709fb836db9a60264c561e7a5
MD5 2cea244d4e4403d6c9e7c58e0bcdcbf3
SHA1 9c3fc8b58d41c44947ef4383e64ba1546c6ddbd0
SHA512 430cf4ad435331e640909b7bfeb5276619fb6dc14772d8ff53b5cae452ccab78f7a63326d489c6c1d487de21a994c2bf17e84323b3e03c650769fc636eaca720
SSDEEP 192:sxZNfRSW0q/fUfsBLoJJIdpd5HW6+WNGYgdcHjyIgrJ:sxZNfX0q/fUfsGJC3HbGX9
TLSH
T1E922A7116E38B97B8CC7D60DBB65BF13E6F91032A1901E48EAFC961C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9464278-5346-4a11-8d1a-a5244de95ea0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9464278-5346-4a11-8d1a-a5244de95ea0.tmp
Size 10KB
SHA256 1d377d3284804256c0bc6473109ab9b7dbc71992f9b48774d472c3744cbf80cc
MD5 db536c4721c2ed8f7c98c6b01279b082
SHA1 98d92874fe93fe979625e010c6a5072d82820396
SHA512 810b628a22dc79839a67dcade8241c9ee854b97378a4b8cf3837850d4bd8b5191f913d81bf303445b7cc6bf9de792ee1797cb480c593fe2ed1bda7a078c567d1
SSDEEP 192:sxZNfRSW0q/fUfs3SoJJIdpH5HW6+WNGYghJnHjyIg5lJ:sxZNfX0q/fUfsrJCZHbGAp
TLSH
T1A222C8516E38797B8CC7D60DBA55BF13E6F95031A1901E48A6FC961C05E7ACE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db5e7951-26ae-4e93-9ef9-f5f3a8dcb39a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db5e7951-26ae-4e93-9ef9-f5f3a8dcb39a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 854B
SHA256 015e16e0a5b4f9eed955150ccd51645f213fae8e64224daedbd765f7279cc5ba
MD5 458df32b7603805d6faa1d0734e031e4
SHA1 91ac0a3e70f238eb440bf9faf376890320da4ad4
SHA512 0e6d49c8c1970fe1ecfbf1f970b0c17b53d6d3500048575a22dd9164205a58f6aeeb386b5c1de3c992ecd7297ff2a7e764bcd1e40c3ba10990cf3e325606c907
TLSH
T125013380A2B6A1AF6FCAA781830F944391F23B77120EA875131DC2F04F9DC100ABF994
MD5 SHA1 SHA512 TLSH

Submit Download

3e0a80e1-9e2d-4997-a8ee-209b16e8eaea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3e0a80e1-9e2d-4997-a8ee-209b16e8eaea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bcd5da37-d704-4ec1-9d89-bdccf3eb712b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bcd5da37-d704-4ec1-9d89-bdccf3eb712b.tmp
Size 8KB
SHA256 02536e90fc33784f391178af229f92d59406187f0ab3e073d6932606466db3a2
MD5 025a9872b36792362b036543fe1852cd
SHA1 46e5b770a0ba9e1b149364a1ac55ebe5701661b6
SHA512 8904dfa5d6848c03646702444c8642d62f9609a7bb907d38c273ea1e94b13c853c5b46ed503528149f13571d3493eab2836685143c43051a0ffbe7f08eb177c0
SSDEEP 192:LJONk6DphmqQmiUyV0q8wGYX59ezbCMmIXkk7NUU6:lONk619lRwGYX5ECm/WU6
TLSH
T1F102E935AC787C7B8EE3AE45F4872B175FD8112BAA906F84D6E81A1D01C769C2307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e97609d1-95e3-4f43-a824-3ba197d3707b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e97609d1-95e3-4f43-a824-3ba197d3707b.tmp
Size 8KB
SHA256 dddda5222614df96c3eea279c65e6e72ca070767a594cb4bdab30fc3cac6fd8e
MD5 cc4d83c7c63f6025744d09ba5f3794f0
SHA1 240f57c3a329ba25d1f3966ed9d8bebff4af50f3
SHA512 8fc8f211fd447b807b09039c165583ac079402ccca4d1e00c324eaeed43bfbdc650935b9b01e82b2eb7213aa0dfe86d822dda2bdc9a708efba9a858e510ba724
SSDEEP 192:KRONd6DphzGqQmiUy60BwGYX59ezbCMmI9TDrzkIIAq5BU6:eONd61xQBwGYX5ECm9TDApU6
TLSH
T10612F935A8B8BC6B5DD3A855F48735034EE4522BEB847F84D5DC2A1C01DF69C230A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2a22bba-1887-4165-a694-282cf336b6fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d2a22bba-1887-4165-a694-282cf336b6fc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7df63e1ec831d94ea1b0fdb5404a1b830e6db5f2fdb976ada391b497c74bfe9d
MD5 668ede2d4713f3d4c5eb72a0d67858eb
SHA1 84265c34920302c9d207476d31fbbbc17c73815a
SHA512 784a0b1451fe5006868f353b65a503dde8d1e97b5bd4dd99db406828266d454bbdbbede36e424da980ef73394eaebd763b2aff40641586a17e353d689b58d0ff
TLSH
T10041275CB6EA1148B3B77E5AABF7A86E487FB8372B06D49D00110D4F0A26B40DC61737
MD5 SHA1 SHA512 TLSH

Submit Download