990e7a9c3d7b5831686664fcff3eade2758d522fd16d4b9108a3a7e9705624af

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 22:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 11KB
Sample261020-2pbkfaaz3k
SHA256 990e7a9c3d7b5831686664fcff3eade2758d522fd16d4b9108a3a7e9705624af
MD5 0c76aa509592f150b5055ed4995f8545
SHA1 8f3db7713565c5395a9a405e9eef6c5d2855bf8f
SHA512 18b739165f4f047b4d559cabe58ad76b1d42ce1408d66904b93323c1a40f4043b513085a85336a99c7e542daad2a2edb8e7efbd9d8bbe8ff76ffda43438802ab
SSDEEP 192:hmKR/RqYruBvS5hSJvdl+BBDlKn5YoP5dg3wW2P7uMAZvLUzDZlkTV3yqNXnPuu5:MKR/RRruBvS5hSJvdl+BBZm5Yw5d267S
TLSH
T129322023FB841C06C8EF89F4D027777CBA7895CB57221C30A19B7B7B7684CE25596289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{8F3E9374-747A-43CE-91DC-2FC728245239}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5316	msedge.exe
5316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 4728	4664	msedge.exe	84
PID 4664 wrote to memory of 4620	4664	msedge.exe	85
PID 4664 wrote to memory of 5004	4664	msedge.exe	86
PID 4664 wrote to memory of 4772	4664	msedge.exe	87
PID 4664 wrote to memory of 5004	4664	msedge.exe	86
PID 4664 wrote to memory of 5004	4664	msedge.exe	86
PID 4664 wrote to memory of 4772	4664	msedge.exe	87
PID 4664 wrote to memory of 5288	4664	msedge.exe	88
PID 4664 wrote to memory of 5288	4664	msedge.exe	88
PID 4664 wrote to memory of 5288	4664	msedge.exe	88
PID 4664 wrote to memory of 1624	4664	msedge.exe	89
PID 4664 wrote to memory of 1624	4664	msedge.exe	89
PID 4664 wrote to memory of 1624	4664	msedge.exe	89
PID 4664 wrote to memory of 1068	4664	msedge.exe	93
PID 4664 wrote to memory of 1068	4664	msedge.exe	93
PID 4664 wrote to memory of 808	4664	msedge.exe	94
PID 4664 wrote to memory of 808	4664	msedge.exe	94
PID 4664 wrote to memory of 1352	4664	msedge.exe	96
PID 4664 wrote to memory of 1544	4664	msedge.exe	110
PID 4664 wrote to memory of 4112	4664	msedge.exe	111
PID 4664 wrote to memory of 5456	4664	msedge.exe	112
PID 4664 wrote to memory of 1876	4664	msedge.exe	114
PID 4664 wrote to memory of 1876	4664	msedge.exe	114
PID 4664 wrote to memory of 4468	4664	msedge.exe	115
PID 4664 wrote to memory of 4468	4664	msedge.exe	115
PID 4664 wrote to memory of 5316	4664	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffd21b4c188,0x7ffd21b4c194,0x7ffd21b4c1a0
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,18130388184677567780,15621485829583654445,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,12441621297477124171,12588363363592864083,262144 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,7293031551570685721,12339909866997545999,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,14750025940849628067,11502181795285949399,2097152 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,13906434226298576022,11291198972318307340,2097152 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,11839570201995326308,11181678356306195893,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,4916471408878076370,693905467882394958,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,13500361347444687687,1912433674809585697,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,13500361347444687687,1912433674809585697,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,7679467092940329112,14556657373942905496,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,2821659880275250080,4819767469821997299,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,4825173337761143393,17295144850523417904,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,5208100359297847265,16669118307929947966,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2945878839937479379,14799423228760455311,524288 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4988,i,15144152075363608439,236713505596007301,262144 --field-trial-handle=2648,i,1061920351495330970,3664836500195369553,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2250a3d1-9e7d-4ba0-b6fd-19dc271c87a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2250a3d1-9e7d-4ba0-b6fd-19dc271c87a5.tmp
Size 26KB
SHA256 c5c8afe89a60d7b7927eec6d7e0df616d2c97e11d27ffb611ad6e80c1264178b
MD5 2b70e27a8065bdcc8c2a5073fb8d790d
SHA1 83f922f33584cfb984ce44cdabfcbb71ec8f8160
SHA512 79fd074fa8f65894f9f1d05a7f9835f38e979e14e0e8169afe73132a3d74ca5d0630753091faea97080015e07b7efe7ff8b6b688f218d1c99278b9d1b774d9a1
SSDEEP 384:njiFiZcIO3sNe8TUNTUlI4c5mg77j4zf8BsuYWToigS5XyMTE0gL/7Iz0oT:OFQO3LwgGEdBsuetsyMTSQ
TLSH
T1E3C25C36D8A4C9BBECEB8BD9A74A7607DEE041239A9C4AC4D5CD5D1D00DB1DE1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c4b2564-2e79-4796-b9f5-770525b055bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c4b2564-2e79-4796-b9f5-770525b055bf.tmp
Size 26KB
SHA256 b9a0e57e76b72ce81c52253dac06a4ace05c079aff4b2d2d0e994c3462690e33
MD5 207050a1cac01e524ba987079ae690e6
SHA1 f874ed885812502bd99a9c87716f4debf23be46a
SHA512 582e238d76279d441df868f4b2295dcd5cee58cdfd04dfcdb32e999941bb392e4a772a7c9a12e9b3dd49f68d172929bde1ba912e3fc455a2a47ab56027fbfd66
SSDEEP 384:ndiFiZcI63sN68TUNTUlIm25mgAmQ4zf8BsuYWToigS5Sy7O6R2FeoqgL/7Iz6oz:UFQ63bwgSSuBsuetjy7TRiQ
TLSH
T183C26C32E894C9BBEDEA8BD5A74A7A07DEF04153859C9AC0D9DC1D2D00DB5DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c9cc4e1-0ccd-4d81-9562-4c3386b4d7de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c9cc4e1-0ccd-4d81-9562-4c3386b4d7de.tmp
Size 26KB
SHA256 933b21302e3691e47db6cc68f0142db179a558cd5878ba7ee8c295525821e3ee
MD5 166ba461921f368759416379cd9461da
SHA1 2b619bb0d70b0812b0a7264b41ccafa8d2aeee67
SHA512 df23b0e4b377a46bdf4f37fcc90089ee2d1fe08fbc3ff0ad7c123781ba1ec3716e0ca335efddab6cc662314fac3f6a4d68b0ad36e781de8f78638b2225b26b0a
SSDEEP 384:ntiFzQkUSvWA3sNe8TUNTUlI4E5mg57j4zf8BsuYWToigS5nnyMTE0gL/7IzKIIc:kFd73LwgKKdBsuet2yMTwLc
TLSH
T128C23A36E8A4D9BBEDEB8B95A74E3647DEE041238A9C4AD4DACD5D1C00CB1DE1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623bc917-59bd-4acd-be02-44510a9247fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\623bc917-59bd-4acd-be02-44510a9247fb.tmp
Size 26KB
SHA256 7023b02ac623bfe319f24219e869a25b8ddeeb903ee4899fc2b6fd7adc90382f
MD5 9133d0b77148f38bce74b2ed7a09f9b5
SHA1 f92c15b47a4e68b54b834f6a53ef274d77d490e0
SHA512 d33e9fab84c8bb3e1114754239e3a67170b2c982fd6107dacb4ff220d85dcfbd515c5d12fa8f06d4beccc58c81ed3c0c9cc0513bd0b1a4d8f2f55c8851f2f059
SSDEEP 384:njiFzQkUSvh3sNe8TUNTUlI4E5mg57j4zf8BsuYWToigS5XyMTE0gL/7IzKIIlW:OFdh3LwgKKdBsuetsyMTwLc
TLSH
T123C24B36E8A4DDBBEDEB8B95A74E3647DEE041238A9C4AD4DAC95D1C00CB1DE1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c4c9ea4-bd6a-4371-bc3d-68247a7018d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6c4c9ea4-bd6a-4371-bc3d-68247a7018d1.tmp
Size 25KB
SHA256 06ec004fe829a9dc5750c75ea575cd497b261c7c6f224c13df0160974a769a87
MD5 4b6956c888376944c4ebe52346c82236
SHA1 6beb62111713b48b7ebad59f65c21f4901a0ced1
SHA512 9a48474b7e4eaf22d3d7c33815e1fc43a9b341b179201319a31d4291ceaa854c8ab3e739b1a70aaf51e889c7d2901047eb5cf09f2990e8e3ba7588bef1097ade
SSDEEP 384:nhiFiZcI63sNf8TUNTUlIm25mg5Rn4zf8BsuYWToigBF7O6R2FeoqgL/7Iz6oz:IFQ63ywgSuJBsuetBF7TRiQ
TLSH
T154C25C36DC94C9BBEDFA8F99A74A7A07DEE00163859C8AC0DAD85D1D00875DE1307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

000a8a38-84da-4f46-bcbe-8da78bf6381c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\000a8a38-84da-4f46-bcbe-8da78bf6381c.tmp
Size 11KB
SHA256 f9951d0896487591aa51e2b54332af4f0ca79a748ca5cf55f118cd843a79c499
MD5 aeca2d569997fb6586cc3c3008b59b33
SHA1 3be34f87ae83dfb9fecbab41b044884370406b5d
SHA512 0990d36fe9f9a71b9ea9d62c1418a6fde168445aad1dce13473186c729dbe672962588c4d2ddb8e8dae35e6b3bfb968b913fc03522f830e478e3d943229b7d41
SSDEEP 192:sxZP9Rbkz/fAsKQZZBozodpHdHW6+WNGYbIMaNYa+YIg5GgJ:sxZP9Wz/fAsKOZBb9HbGFjYan0E
TLSH
T1C442D715AE38A93B8CCBD20DFA55BF53D7F91032A0951E44AAFC8A2C15E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2329b5aa-5f38-4e79-ad1e-8ef2c4de14b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2329b5aa-5f38-4e79-ad1e-8ef2c4de14b2.tmp
Size 11KB
SHA256 59104a07197d5d44e46a16c427aaea2056816c97d6f8a4f46c255b597bc0c648
MD5 a32ce35e3d1a6accc6b623e3fd82e441
SHA1 26ba5c08a9b3722dffac7cc568e5fd9df941fdb5
SHA512 2a119a6296c07322798f4bee7117f650d1d8063a336c7e2aba29e2960170ed5d9602c90577f7331b3a86caf12ea3b13fe10a49408221435a90593d97f5e8af73
SSDEEP 192:sxZP9Rbkz/fAs0QZZBozodpHdHW6+WNGYbItaNYa+YIg5GgJ:sxZP9Wz/fAs0OZBb9HbGFAYan0E
TLSH
T11342D715AE38A93B8CC7D20DFA55BF53D7F91032A0951E44AAFC8A2C15E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

875d8d75-f3f6-4d03-97ad-3f8ec915f426.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\875d8d75-f3f6-4d03-97ad-3f8ec915f426.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d4dce7644c1a27ee733f6a5de17accae12dc411df7147464226c25c8047b3605
MD5 f1a20aef4d7d3408aeb65895c5f3647c
SHA1 6a20fdfd1c89f1fc839d4c92d5441ff86916b281
SHA512 ffe79f01042ae4cd134b1fd3bd94f4a3774b5f7aeace72768363208cdedc7eb478e6789b16a2032a687e443d542eb0f72f6debd005a311a3e9fddd7957a53ffa
TLSH
T14BE07DC405D8C3BEF208648703F8431C93A0361AD2C06AAF3708C9D572874C8B6C36B8
MD5 SHA1 SHA512 TLSH

Submit Download

fc31421e-89da-4764-b540-d3e70e46b880.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fc31421e-89da-4764-b540-d3e70e46b880.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1a28c12a-152f-4dfa-8a35-a97984670bd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a28c12a-152f-4dfa-8a35-a97984670bd6.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

372e3bdf-82df-4392-bc76-7b2e21f4c9a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\372e3bdf-82df-4392-bc76-7b2e21f4c9a4.tmp
Size 1KB
SHA256 acd1dee44c57155927241cacddc1c189deb815a26ba2fccbae64236e340198bd
MD5 3e0ccac20c62fd119e8b4cfa82a06bd3
SHA1 377c1695e94d10abcd4e237ff8048f25b17fbda6
SHA512 f55d344c1b8cb02c1d76d912e8fe0e34a7929c343501df002890aaae35107946b288928c5229d327a429925ad24354b861c43ab8fd0f304d8afe4d4c5cddcd38
TLSH
T1F631C0F387F4856E8A0196F0AA18BE2FCF2D0511431C7D9AC4E4AE2793E3471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

c57ad34e-c259-467a-9135-b4484c45080e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c57ad34e-c259-467a-9135-b4484c45080e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8bc94553f70ab74e91fb060f40ef7e5d21671b43bafc12b26f57471fc233bd1b
MD5 0de3ee9e590fcf8f14c13cdc2a360451
SHA1 70118d910af3b78839de1eddb02f449a617cab8a
SHA512 55eebaf3972d9afdac0871073316c61481ef58b5de0acead98d84e8422a06506c69d7b08468d3148cdc8bdfc8a24b7890f548274846c2ad915cf6bf6224b0f65
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXYHvW2/qGoEr:OtfFvpopPxrB4RhfYPt
TLSH
T100B2211471BA421038FE790881B5972F064272B37258E67B7FBD14A69E6BF085CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a61bb658-3237-49c5-9ad7-7115b46f6849.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a61bb658-3237-49c5-9ad7-7115b46f6849.tmp
Size 414B
SHA256 19cc4fa0d5d9cbdf87f84b27d1736abc9297dc4f53cb2d7baa64b0b9fc38d8df
MD5 3478e323b064efae27b2f6ae7075ade3
SHA1 109755354ac3ab223cf6add18c3990b873d8f736
SHA512 4994ee1d22311114068af95da1c4872aad6ee43a8263b5a358e6f2a3afed0e0ba22e6a4401fdfa955dad85f28abdd4142f17be9114222f27f0803ae65a6b8d07
TLSH
T13DE02BE5CD15BC3709FC472850540A41EB4113473A80A54B773C901D8FB1A3A418796C
MD5 SHA1 SHA512 TLSH

Submit Download

bb956a82-7a80-4b41-9fe2-7a5f62df8f25.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bb956a82-7a80-4b41-9fe2-7a5f62df8f25.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d85ee50f-57e0-4c22-96eb-e04ce0dc9778.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d85ee50f-57e0-4c22-96eb-e04ce0dc9778.tmp
Size 11KB
SHA256 9c43c3cf6ead9932f4e0bb9711cf30ce9bc0571c4688a11aa4c06c5c34e96575
MD5 2d8990d78dd15286512ac0d484e6a231
SHA1 55d1a5dc16b407ea11aa08dcda205c746ac67515
SHA512 96e1a9e4ea2dc61a03b3c2f559aad4145fd603fc3f73a8c8ffd786c3477ad0ddd5a8b42d6a77dc09fa92b3c51adb850a1315fcd3c57081249b67b67c258d9dad
SSDEEP 192:sxZP9Rbkz/fAs5QZZBozodpHdHW6+WNGYbItaNYa+YIgjgJ:sxZP9Wz/fAs5OZBb9HbGFAYanjE
TLSH
T17C42C815AE38A93B8CC7D20DFA55BF53D7F95032A0941E44AAFC8A2C15E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee9a9b24-0e07-499a-99dc-df4a1b2b38b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee9a9b24-0e07-499a-99dc-df4a1b2b38b7.tmp
Size 26KB
SHA256 4e7e4b92106a48bbaf0bb89afe5f8a5ad543e97828421f42b257322057606aae
MD5 88b34597d4c334753792c1b2ec61f7e1
SHA1 06f3561119fadd36cbe5bdde0934d14fc0c81c2d
SHA512 e1331057e89f55028a3d8fecb04ce6e1044efabd01ccee2de87711b264dcb6ca4f222ef4d774ca9ed168a9a325b5c149fcbdfe2c5c1f69d4bdc05107301d7238
SSDEEP 384:n7iFzQkUSvh3sNe8TUNTUlI4E5mg57j4zf8BsuYWToigS5XyMTE0gL/7IzKIIlW:WFdh3LwgKKdBsuetsyMTwLc
TLSH
T1ACC23B36E8A4DDBBEDEB8B95A74E3647DEE041238A9C4AD4DAC95D1C00CB1DE1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0ae880e1a53006c14ef94c7ad6752f4ff1fb22e67fb7f23286d4ec16ff914a8f
MD5 86dc5719811bbe535db3c0fc2bd81cfe
SHA1 29e9a0fb2baf7d82c09e4a4355b854cdbc93a599
SHA512 f769dc64fab4fe78e62b01fd4d4515e3e0f67baed93825086b1a9156e049df9fceedc4ad61fb92bfd005085bafbea43fe4e5148e9dd5ba6c14d03a6ee8f1d5a1
TLSH
T19E41285CA6F91158B3B76F5AABF6A86D447BB8772E0AD45D00010E4F0663A41C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download