4082b4f9762c59a284724178db97c8974cc1144a25f4f2d26dd91a0c6dcf7d31

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 22:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.htm
Size 1KB
Sample261020-13f7eaaw3k
SHA256 4082b4f9762c59a284724178db97c8974cc1144a25f4f2d26dd91a0c6dcf7d31
MD5 037659bf7a8a9596d243a602510f6f60
SHA1 83946a69c632b628c9db03ed8be2fce70b15542a
SHA512 147f552ce322241994578d1e10f8ce33ffd137a40a4609c2763deeca87668f58bdd944c84926b4c320fd88ed4e8ce4754ef633d111be9e753b26c6ee875d0ce2
TLSH
T1DD2141726B092D7356F24776704B32A87B0050E8A2123F24705FB1C772D4EAEC2BB1D9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{2C141536-5EAA-49BC-9321-89BFDCD04BDE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe
1224	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1224 wrote to memory of 5072	1224	msedge.exe	85
PID 1224 wrote to memory of 4576	1224	msedge.exe	86
PID 1224 wrote to memory of 3980	1224	msedge.exe	87
PID 1224 wrote to memory of 3980	1224	msedge.exe	87
PID 1224 wrote to memory of 3980	1224	msedge.exe	87
PID 1224 wrote to memory of 4800	1224	msedge.exe	88
PID 1224 wrote to memory of 4800	1224	msedge.exe	88
PID 1224 wrote to memory of 1168	1224	msedge.exe	90
PID 1224 wrote to memory of 1168	1224	msedge.exe	90
PID 1224 wrote to memory of 1168	1224	msedge.exe	90
PID 1224 wrote to memory of 2464	1224	msedge.exe	91
PID 1224 wrote to memory of 2464	1224	msedge.exe	91
PID 1224 wrote to memory of 2464	1224	msedge.exe	91
PID 1224 wrote to memory of 3772	1224	msedge.exe	92
PID 1224 wrote to memory of 3772	1224	msedge.exe	92
PID 1224 wrote to memory of 3772	1224	msedge.exe	92
PID 1224 wrote to memory of 4596	1224	msedge.exe	93
PID 1224 wrote to memory of 4596	1224	msedge.exe	93
PID 1224 wrote to memory of 4596	1224	msedge.exe	93
PID 1224 wrote to memory of 2220	1224	msedge.exe	97
PID 1224 wrote to memory of 4816	1224	msedge.exe	98
PID 1224 wrote to memory of 2220	1224	msedge.exe	97
PID 1224 wrote to memory of 4816	1224	msedge.exe	98
PID 1224 wrote to memory of 5000	1224	msedge.exe	104
PID 1224 wrote to memory of 732	1224	msedge.exe	115
PID 1224 wrote to memory of 1052	1224	msedge.exe	116
PID 1224 wrote to memory of 3176	1224	msedge.exe	117
PID 1224 wrote to memory of 2348	1224	msedge.exe	118
PID 1224 wrote to memory of 2348	1224	msedge.exe	118
PID 1224 wrote to memory of 1476	1224	msedge.exe	128
PID 1224 wrote to memory of 1476	1224	msedge.exe	128
PID 1224 wrote to memory of 4748	1224	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x248,0x7ffbbef4c188,0x7ffbbef4c194,0x7ffbbef4c1a0
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,7390804716911455036,9540889000254301141,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,9602697066469041536,14860972186364492418,262144 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,14271101563475171462,17132863669464373353,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,10746623375592622836,7539587747295716656,2097152 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13944497275989587829,1936699408840958220,2097152 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,3695574186545416599,18300798245083505394,2097152 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,10368287228177272129,6582777133518120006,2097152 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=1624 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,15465397619247759787,7116599134034603122,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,7691417609704079369,11904725572875550907,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,11928124967978082740,7332447770988256086,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,11928124967978082740,7332447770988256086,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,9821430295165965512,3629446171661513475,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,10891654598608757297,4989853617159854185,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,4235563021852125842,326220727179511507,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4024,i,11950872431560990041,4040690191598849924,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6432,i,4060234728531289992,10945473278028246958,524288 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1004,i,11073201496924973784,14498936316490331998,262144 --field-trial-handle=2208,i,9611350909731150740,2471332368277235738,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

081cf358-0c61-4b81-94b9-0c7486005210.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\081cf358-0c61-4b81-94b9-0c7486005210.tmp
Size 18KB
SHA256 613eb788525b97b33f096dca6b1d08b5987c1924d2754d5912d16e34517e497c
MD5 5f0feca8ed920cf86c4a0b962ba4463f
SHA1 3d1cd8c1f91b6a8d5be98c026eed163f14f51d32
SHA512 2444c46eab2135e44c079ae626dd648015813d87bf5b62748cf5a0e7b814c20883f042a23e5fe39d18887afdcbd53ffd969249bb05cca377ca2d2022a284adb8
SSDEEP 384:7QkUSv0sNEvwe9/PGoVUOjTVu6diGrnRwJr+DEIIlK:1015vnbNih+DELY
TLSH
T1B4826C356C386C7B89E3A202F14A3643DFB4D16BDACA2B94D5DD5B1C01DA2EC2347D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55deac77-cc15-46bb-9e55-c6ea0e2fbe56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55deac77-cc15-46bb-9e55-c6ea0e2fbe56.tmp
Size 8KB
SHA256 f80b8e18ad8b88b95354408391bf167185812e6d2c233a2878d1b6993869acfe
MD5 aacc720503d209a0900935be2290dc9a
SHA1 8e49e3a23973f435f70507972ff683be34e7f294
SHA512 bc7bc8ada8fc4afc367d181a28d500be3993b37f131cf7f6771b6e493bd83dcca313da6280642ca60283498ec371f47dc4ef82d528049f85cff62c91515e84a8
SSDEEP 192:SONa6ygpQmiUyMXtOCTVg9l+FdV0R0rNzPd0U6:SONa6lH5tOCTVu6diGrBaU6
TLSH
T16A02C835AC683CBB8DF3BE06F48B36139FD4116BDA552B94D9DC1B1C01D76AC2346826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

1b489892-edf1-4bbb-a426-91bf3eb6fcea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b489892-edf1-4bbb-a426-91bf3eb6fcea.tmp
Size 9KB
SHA256 3c05ac5659bfd9ef71aaaff29d027a62dbfa024c9df3935b8d2c2e4ce330c394
MD5 393000a65092646f8e0adc93fe3b333d
SHA1 34ec7a8f9027d5b7b4e3a364271e840ba0931729
SHA512 22244b22b5770d6156b89dd242f13c9c21c7cbeda2e0788b3cb7c24b862568cee6c3d3708f005405c2025278be5a1212dfd018e6c61cdd9116fc760166437b5c
SSDEEP 192:sxZqR7Wc/f7sOdygIdpdJHW6+WNGYRPnnszIg5vJ:sxZqIc/f7szhjHbGm6r
TLSH
T11922B752AE38A97B8CC7D20DBB25BF53D6F95032A5951E48EAFC861C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

264e5dee-a344-42a0-8d46-a71c70bd8841.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\264e5dee-a344-42a0-8d46-a71c70bd8841.tmp
Size 10KB
SHA256 b731f6a8b9b712c3f995b8c300a43176e76775145ca3b11cd13974dc5de47275
MD5 6526b8427b70cde9d042435b483342d5
SHA1 08ac87f9b4b342d10f4c876fccb5c86da9bef680
SHA512 f333881eec50be8c79c748333dfa8d1604dfe7669334bed4190273b3891e8f9baadd953a3c9ab23d1ca4f715d57b64bc57104a0900e3a51fbc5d032ecf69b6c0
SSDEEP 192:sxZqR7Wc/f7sOpygIdpHJHW6+WNGYRPpuszIg5NJ:sxZqIc/f7snhpHbGm7t
TLSH
T15A22C952AE28A97B8CC7E21DBB15BF53D6F95032A5911E48EAFCC61C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c505c56-688f-4acb-be9e-0d8813329e48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c505c56-688f-4acb-be9e-0d8813329e48.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80eaf568-3628-4c87-8798-43e1cafab805.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80eaf568-3628-4c87-8798-43e1cafab805.tmp
Size 10KB
SHA256 6c4e76deab5d5d7f97d3d01644f43d5000fb2d9c6bda908a81982570c7b8d3c9
MD5 6f12227676a36fca8a3a3ef8261a69c0
SHA1 aaeaa200fabd76a0719f413a46b7ce6d0b3bc651
SHA512 efade5ce2cee3fa3e330d3a428de631f67a0d23e6b3bad9a0457077614b1cdb09f055cc5b2f8401d3b9014e4edf9cecdfce3115a402ab4e89ee84c478b7f842a
SSDEEP 192:sxZqR7Wc/f7sOpygIdpdJHW6+WNGYRPFZszIg5NJ:sxZqIc/f7snhjHbGm+t
TLSH
T12322C952AE28A97B8CC7E20DBB15BF53D6F95032A5951E48EAFCC61C05E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93ae46ff-d95a-437f-80a5-ebcf475b70ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93ae46ff-d95a-437f-80a5-ebcf475b70ba.tmp
Size 27KB
SHA256 043a3c7343de6ba981a71a5efd3014a63fc4548bc7800ffe51fd108e121aaa24
MD5 5fe0aa28ca5fb5504465a7284b487d88
SHA1 a572dbba9d0f363beeadad8bcf67e302b564d103
SHA512 43f748d66d2264636b5cb2f29154cee4e69c8b3268c57d65a7c935109a8772ff7a22e49b9b2516b449119cb1a809bd7290f5706b5c131f13a6b9be818ba4e3ca
SSDEEP 768:PbK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Iro4+0O:PbK9uzYWvcQWsu1ja0HL7Q3z4+0O
TLSH
T101C2F93F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8424495b7e4fa9c1dd9396e5f87fc973d01dc66b0c0fd39976acc638b6e9c61a
MD5 c9dbd6bb444b75fc66943187173b665e
SHA1 d92a4352d8fe2ddb9ea73b8b0dbbfcdb3339f8aa
SHA512 74b850e90afe9418b3969cdbbc06e1905d7f0ee143a852993e54ba987cf06587484a8c0501d8c011be841f9cf3e08bec76c45450957cb3088c20077994b7460f
TLSH
T146E026C444CCC32EF218644B03A8578C8BA0361F93C0AD1F5708C6E8F2C5084A7A26B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f032a5f03050be03dcba2cb382ba9fac8ff75daa35be321b27db5ab444a2d998
MD5 05edf7ae280244cfc78c9e6865777865
SHA1 b6196356864c4b7aba4ccb233150c651ca845493
SHA512 328ed4be6551ff91a4f87fc406b315ca2abf4a74077fb9820a5387c6d5c1e3d36a9901788feb5193a58ead7af485ab4f5695863af1d3ccd9637bc8a7b836fd46
TLSH
T19A51C6C4DCB14394FB991F79D2D801CF36B867A1668BDF3E1A9DE8B9580AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a60992af0c72756104bb35536c0a43328c001ea716f312a904b25f930796876e
MD5 eb7e28e8fdfed1d4874f8dc832e423b3
SHA1 7e9d752659479ec0a902a7420b69fa042b3a02f2
SHA512 4e0c02b71854edd5851b6d5e9a2bf658d66b57c456f9bb5742620f7ff34d3e617da113c67fd6530524a5bcc94d7d615b478243aa15867d9aad0180e8f53d98a7
TLSH
T11D51D7C4DCB14354FB991F79D2D801CF36B867A5668BDF3E1A9DE8B9680AF19500C348
MD5 SHA1 SHA512 TLSH

Submit Download

ad1c4017-1dc0-483d-93be-d3dc0b0238e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ad1c4017-1dc0-483d-93be-d3dc0b0238e0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1d0ef774-cea3-4bc0-8bd0-89cdd34164bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d0ef774-cea3-4bc0-8bd0-89cdd34164bb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4c5ac7f9-e9ab-4156-a874-da0cb1538dfe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4c5ac7f9-e9ab-4156-a874-da0cb1538dfe.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

567368f1-cf69-444e-a26d-1a5052c65587.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\567368f1-cf69-444e-a26d-1a5052c65587.tmp
Size 949B
SHA256 5cbb38bb88c4be2ff5178ffdcd242d4dd2de0a586b4857a9bee0596cdd201e6f
MD5 5a2d9bfd98420a09032804a4115c95da
SHA1 b80cd6d46432be249c1946b2ed694164f505d3d4
SHA512 bdf949bf78f2d9764ff84e2d2ddcc990fc298502dba4273486027aa6e97ca7d718fcb22c47bf34c865ffd4e9d7ba4145c00b85f1f21e86d3b4390225bdddc06d
TLSH
T140117DB3C3E5956E8D0556F05A24AE2BCE1D0505421C7C1AC9D4EF67D7E3475D00255F
MD5 SHA1 SHA512 TLSH

Submit Download

abdd50e2-30a8-448b-a6ee-8487f238155d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\abdd50e2-30a8-448b-a6ee-8487f238155d.tmp
Size 9KB
SHA256 e8dc8f7356adbddbbdf8a1f530607db5e743e36366255a823840b3223bac51a4
MD5 dee77d26574e81d3b314650d5d571383
SHA1 42bc8dc0d18aefe55c77afaf6d9e6076a69174b2
SHA512 509ba98084938cf321126003fff11c511749724147978f360a424b12ffb206058fda4e1820b282097f8c5d308b84d3a813e703e8525cb9462b98dbe3eb391da1
SSDEEP 192:sxZqR7Wc/f7sTygIdpdJHW6+WNGYRPnnszIgrJ:sxZqIc/f7sGhjHbGm69
TLSH
T15E22C7526E28A97B8CC7E20DBA25BF53D6F95032A1D11E48EAFC861C05E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92ac2ce4-d79e-4773-aaa9-0f5b68f166e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\92ac2ce4-d79e-4773-aaa9-0f5b68f166e0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d7a4a2b4-d92f-440d-b9f2-889f355efadc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7a4a2b4-d92f-440d-b9f2-889f355efadc.tmp
Size 8KB
SHA256 a22c3e7235018f7041a2b8465d793aedf5609cce115410e9f1897d599674d9f0
MD5 e53d72a12f4cc9dabd8a704a039c47ab
SHA1 1205eaf5346ea6216ce3e11e5b9c5d6fe60bd674
SHA512 cd5c568769099b2cb96688204f5a0af0ed26b53be386f46915d11b7c119de1497a13f6d12e680799dd8a7bc892bc68d6dfc3290b899827e6f11daa122fcbbbd1
SSDEEP 192:mONd6y5QmiUy5X0OCTVg9l+FdV0R0rnhxFJSJrX3UjrqsU6:mONd6sq0OCTVu6diGrnRwJrUDU6
TLSH
T13812F935AC682CBB4DA3B541F48735139FA48167DE8A3F94D5EC1F1C01EB6AC134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e941f3e7-2857-4db2-99a9-5d3cfd0e5d96.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e941f3e7-2857-4db2-99a9-5d3cfd0e5d96.tmp
Size 18KB
SHA256 38f4d2a0913d5dd0342e65b3ccc2cfd7dc81231f7b2515db662431ceeb49d7c4
MD5 3183976301a784e4f0a5c2d54c05793f
SHA1 8700c8e4b75a731c0e7d6649d58c6e974cb0e0b6
SHA512 a79977d88913b3606e8bdb1fef62cc3dc612f2ae160b5cef3c615e1af0cef02852bf50a79ba475d7970eb319a5f5a871cdd352bfd39436ea49c0bb3eb220b283
SSDEEP 384:iQkUSv0sNE6we9/PGoVUOjTVu6diGrnRwJr+DEIIlK:a0S5vnbNih+DELY
TLSH
T1C0826C356C386C6B89E3A201F14A3643DFB4D16BDACA2F94D5DD5B1C01DA2EC2347D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b3bbf6d-996d-451d-a7cd-2ff446bd352c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4b3bbf6d-996d-451d-a7cd-2ff446bd352c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f8d9d2fa-3013-484d-a3b6-a03410e4fedf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f8d9d2fa-3013-484d-a3b6-a03410e4fedf.tmp
Size 21KB
SHA256 de121f9f4f0871f91d53aeb664165deefd1d97eac357b38b206b1c6f4dde0dbb
MD5 e32d1d10d635707275a1d992c589fed7
SHA1 febb0e4746791b7070346a522d831fe0a8755b2c
SHA512 6c84827b450a63f9b5188dbfb1043e2cb38f6b3c32367d4e42777f0c68a654710deb1f78ff3cec1f68f71240ab4888d954f7e13054bee83fc5d3a5dff9141270
SSDEEP 384:viFzQkUSvGzsNM8TUNTUlIl6we9/PGoVUOjTVu6diGrnRwJraDEIIlK:6Fd29wgA5vnbNihaDELY
TLSH
T105A25B325C689D7B9DB7AB41F54A3203CFB481A7C9866BA4E6CD9A0C01DB2DC2347D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 20bc74c2784cf858049e42e860788499b6bfe7822da56598bbf9659c7e57aebf
MD5 ba8f8a59df3b837c4be324fdec29e166
SHA1 65444acdd88eaa7a4e69859b078a9825d5001a1a
SHA512 14050f04973d6959491066798798a1ee3fe8b40b7af29b2fbb6a47a5a5f3bff305f4a661f27fbd215dc656c3fe44ffaf077d88834f624b0c9e16459385cb5431
TLSH
T1C6410E5CBAF91145B3B77F5AABF6A86E447BB9372E06D45D00010E4E0663A00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download