f3e368106df0c57e1278d14d736a684e78cabd50a35c59204ed7570f4f01c701

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 16:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-1.html
Size 10KB
Sample261020-tjee5ss18m
SHA256 f3e368106df0c57e1278d14d736a684e78cabd50a35c59204ed7570f4f01c701
MD5 e1b85e3703e56e376dde9f66338c0f26
SHA1 a1b6dbe683b89aa893d51955d3ee64c70388be89
SHA512 ca4ffd99ace765730f45b68b3298409dd206de4ebb2397076ecd6615b63575f318333efc1a6ea7e675f3a4fe88d356057247b2ef9ed56b5f15424d85f8eded49
SSDEEP 96:WST12STUXVSTUccGtqcK6x6CFUtbKUkAIgrCUtdKSGNxoKn7Uw7bW7bD7z2YvCno:zJXk7rIKSSMnB2jPNBIwTcE
TLSH
T1F6224F1197F8160B863658D0E3726F414FE0490B4B460AA4B6ADE27EEFCFC5359633AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2260	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{9BC79F8A-662C-4B98-8ABA-3E6439F2EA0D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe
912	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 912 wrote to memory of 1652	912	msedge.exe	85
PID 912 wrote to memory of 3708	912	msedge.exe	86
PID 912 wrote to memory of 2260	912	msedge.exe	87
PID 912 wrote to memory of 3708	912	msedge.exe	86
PID 912 wrote to memory of 3708	912	msedge.exe	86
PID 912 wrote to memory of 4840	912	msedge.exe	89
PID 912 wrote to memory of 4840	912	msedge.exe	89
PID 912 wrote to memory of 8	912	msedge.exe	90
PID 912 wrote to memory of 1464	912	msedge.exe	91
PID 912 wrote to memory of 8	912	msedge.exe	90
PID 912 wrote to memory of 8	912	msedge.exe	90
PID 912 wrote to memory of 1464	912	msedge.exe	91
PID 912 wrote to memory of 1464	912	msedge.exe	91
PID 912 wrote to memory of 3688	912	msedge.exe	92
PID 912 wrote to memory of 3688	912	msedge.exe	92
PID 912 wrote to memory of 1148	912	msedge.exe	93
PID 912 wrote to memory of 3688	912	msedge.exe	92
PID 912 wrote to memory of 1148	912	msedge.exe	93
PID 912 wrote to memory of 1148	912	msedge.exe	93
PID 912 wrote to memory of 2268	912	msedge.exe	97
PID 912 wrote to memory of 2268	912	msedge.exe	97
PID 912 wrote to memory of 2500	912	msedge.exe	98
PID 912 wrote to memory of 2500	912	msedge.exe	98
PID 912 wrote to memory of 5064	912	msedge.exe	100
PID 912 wrote to memory of 792	912	msedge.exe	109
PID 912 wrote to memory of 2492	912	msedge.exe	110
PID 912 wrote to memory of 1056	912	msedge.exe	111
PID 912 wrote to memory of 5056	912	msedge.exe	113
PID 912 wrote to memory of 5056	912	msedge.exe	113
PID 912 wrote to memory of 332	912	msedge.exe	114
PID 912 wrote to memory of 332	912	msedge.exe	114
PID 912 wrote to memory of 4636	912	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fffc788c188,0x7fffc788c194,0x7fffc788c1a0
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2180654315198984907,3774477475930417693,262144 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,15779034932546473051,8133857477016456291,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,6936836860615696366,11174228767123842279,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10005125267565467966,6075577651571714004,2097152 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16217348029598597385,9492004501935177399,2097152 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,7353175195462716147,16624289914993523073,2097152 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,15973502830053908428,540649364865643138,2097152 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,11201162714201518110,18355215075814871378,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2659032134947025863,5299689768347696649,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9434141299144991513,12491215417884437189,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9434141299144991513,12491215417884437189,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,15196156992527450828,3360009244765233075,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,1494610694043289423,2281598258509377229,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,7119053245512645192,11181628717635615655,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3324,i,12727787106289379447,8710011041138894240,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1012,i,13857927299894300095,13567073878333360968,524288 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,3950147779559932961,7965180650394498968,262144 --field-trial-handle=2228,i,5687203368885177668,2142330026155842090,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2adb3907-5d9c-45e5-8fb8-8504f597e82c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2adb3907-5d9c-45e5-8fb8-8504f597e82c.tmp
Size 21KB
SHA256 4b52aae3a3432ba9ec9834c28e608bdba47e601792cccded461ad1347a6b14ca
MD5 3a5a0605f0945bd1e4583a77170853bf
SHA1 f7aaee1db8da6d33a8b00b45ab71160be88efae6
SHA512 dce42192e02592a47c4857a2f582c77067ca63dafc6466a7d1a5ed7cc77313cedfc89e3eb50a56017247dd827f72a5bb16ba9115c9d4752473af53a0d9221a01
SSDEEP 384:RiFzQkUSvgzsNm8TUNTUlIlyI1uWBzIGmAl89IXv6i2sIfnIIli:4Fd8XwgJBN7Cov6i2sIfnLE
TLSH
T156A25C735C64E93B9EE39A44F5493513DEB19167CAC9ABA0E7C89E1C00CB2DC234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

562f0fb0-2a22-4950-954c-db46c6abf641.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\562f0fb0-2a22-4950-954c-db46c6abf641.tmp
Size 8KB
SHA256 827abd88104c9b5d93e7e9fe86f67b1e2b74a0ad91e44b170d0dc9febb97ea3c
MD5 2b3252171205836fbeaf99fe642c1abd
SHA1 1ee6d536ca12fea63dfdcdced8aba5578749154f
SHA512 63f71b3884b41d2e3b51857b1614d7cbae2431b905c5f4dadc3f0e9899f787932ac8fdc2ebda1a3956ee476eee7c9ebd7e67d17b40004482464c1100d034b74e
SSDEEP 192:aONQ6IE7QmiUyIlTPuIGmApjzor2Ro0nC7s2qU6:aONQ6DtvPuIGmAl8HsZU6
TLSH
T12D02EA35EC78BC6B9FF3AD09B4872A239EA5113BE6951F44DAE85F1C00D725C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5719d939-15e0-48e0-8d73-e812e7564bfd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5719d939-15e0-48e0-8d73-e812e7564bfd.tmp
Size 18KB
SHA256 620d3bc1e43929ad3600a424c9b723b0a16e075aeaaa3f3fa63d72e6bd8f8d52
MD5 2b7032a7fe675a23da94b60637730f8d
SHA1 286cf252284f281aeb0183020be8251722103314
SHA512 f0dfa4c1b9f38b65c78460ff047d32ffca9b23d0e2c7179cc2bf6c3218adf7d58a53c46f031dd07aafa9dbc1c21d0507293d13ee82db1a7c939f056ba2e0fca2
SSDEEP 384:oQkUSv0sNmyI1uWBzIGmAl89IXvi2sIfnIIli:g0xBN7Covi2sIfnLE
TLSH
T1A0826C726C74AD2B8AE3A504F18A3553AE74912BD6C85F94D6DC9F1C00CA398234BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c3ecf5f-6802-47fa-bea0-af1c1ac7e694.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6c3ecf5f-6802-47fa-bea0-af1c1ac7e694.tmp
Size 18KB
SHA256 3bf8181eba4dc44525e054a22fd4e82513b07b9fdc2eb38d5a53dce97584fddd
MD5 46d9bee3333b91bd6bdf09ab36403ed3
SHA1 97567881011b169609ad0ceaac821114617cd170
SHA512 1995143d943afcb1165400bb3c064ce8f19a257d019ea99996486c2d9840eaa4efcfb8ebd72d47f3b2438f0b7f90a07c95a67a7e4ee2a3b5f06c46913d59467b
SSDEEP 384:jQkUSv0sNmzI1uWBzIGmAl89IXvi2sIfnIIli:N0KBN7Covi2sIfnLE
TLSH
T12C826C726C74AD3B8AE3A504F14A3553AE74912BD6C85F94D6DCAF1C00CE398234BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66aa0d4b-0eeb-4878-acbe-04eb8d208f09.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\66aa0d4b-0eeb-4878-acbe-04eb8d208f09.tmp
Size 105KB
SHA256 ebf0f1691f49d860fa202d63b050ce2cad38a0496d2658dba8550bd94b28fce4
MD5 7e383905ea5e52c72981148e0ba96a63
SHA1 69b00ea95b83255ffb3f785258efe9e2849602af
SHA512 9017a3852bc1710a7236871d7d43724c12d99f4aac743e58adc0ed0e10a6b4d51529c2fd094425d056a04de8831ea1cbb443ebf8f28e3ebce5c3178e7f66be02
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7q:fwUQC5VwBIiElEd2K57P7q
TLSH
T1F0B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

1e070688-1b21-4b8e-84b3-de4c6c63f293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e070688-1b21-4b8e-84b3-de4c6c63f293.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3ed87934-8f33-4764-a0f7-ce72aa725373.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3ed87934-8f33-4764-a0f7-ce72aa725373.tmp
Size 10KB
SHA256 3e7360c2a8063bea81d35bd4b484595f2afb89e964825055ca1874375b267d45
MD5 dd11e9bbf64fc9e8216d1b5073f17df4
SHA1 13b3d1424d5db81123a4220211697356d2aac9b2
SHA512 572c1fd695f960b8c63b150572d2f375d6b7847470037e3aad8aba90f4b91d5576e816b20a81a7981a49f074566f463d57ce099c3fd5050b72cc0bbc677a5d8f
SSDEEP 192:sxZpRxWx/fWsxJnhJIdpdZHW6+WNGYaplgSPIg5EJ:sxZpGx/fWs7nQLHbGPu
TLSH
T17A22B6526E38A93B8CC7D21DBA55BF13D6F95032A1951E88A6FCCA1C04E76DD124780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

644214b8-c54e-48bb-b972-2869b2b2a70d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\644214b8-c54e-48bb-b972-2869b2b2a70d.tmp
Size 27KB
SHA256 05f2fb6950b1b5052b353d5040a517677dddc36f0f46ba410603647f22bbe5c0
MD5 7dff3de68ecba75e1b715c50b9222fe3
SHA1 96b32bb7e7a2d0f56dd2e31982fee6c801186d25
SHA512 705660d85452826d36d91c3bc9f14612330e8375b84e4b33c2f95750e10243234d1b4b1d58b86be6b6a9ae285a736a494698aaa9e05be6477ddbe037c2864ab7
SSDEEP 768:VHWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy76ro4FfevmRA:VHWPcLKWvKeEeu1jaClLiF7x4FWvmRA
TLSH
T1E4C2FB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A644D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3c52a52307ceab3f56f8160a7529b9d25afbf6271b9534b364c13d62a7e3d8c1
MD5 aea83914c629b76163ef3a781ef4ba38
SHA1 db9fa205562eacc6e88083d500c6eff745b9a65e
SHA512 8bc5dd9fc1baebcbee9e3b14ba2c5af7df05b151ed02095df65239debbb7f520b060581aca81c9af9b59cd169231a5ad24762625391cb2028aebdbfb7647fa53
TLSH
T1E4E086D909DDD32EE34C7547016CD38CC7A0271EE7C56E6E2B08C684724AD44A792A94
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1396c5b692b2eec1f0bd6f55e1b33977114f6144aa2db02079c63b95a7a740b3
MD5 69a0d1f0d2ed899217ee63d7ef765c38
SHA1 3d740d7a29c6fcef2f5baff3b55e1ce9a990a08b
SHA512 d8da8e445ce0bef4a79770fbfbbabe314e32c8b7c7ebc4fbd0d555e18b290d9b401a38cddfa3f86cb25a1ea1798c0f0e461142b73cdf821a6bd7e5df82318370
TLSH
T1DB512DE1D5844AA3FB985A3382F607B7363755A2A6CF5F5E21ACF4B9480F724500318C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3099ce1b78c925878faf103ea747ed5f663bc44a546fd6d349122d6180313e7c
MD5 d55d4783c54315974f211282b24a8b26
SHA1 24c026695f73b2f3933fdca92b87e9223f084f57
SHA512 5f99eaf3c483e183bb240f2df24568e31a2360a7e9fcbd397563c0a67cc495d4acec68bf81faa38edfb336d679845f1adb392ed44e00c500d6a56dce583d9c63
TLSH
T1295130E2D5C44AA3FF985A3382F607B7363655A2A5CF5F5E10ACF479480F724500319C
MD5 SHA1 SHA512 TLSH

Submit Download

1366991a-3545-4be6-a4d0-3a1048b8448f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1366991a-3545-4be6-a4d0-3a1048b8448f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41f59793-00ed-4e63-95bc-ba47086d9ce7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\41f59793-00ed-4e63-95bc-ba47086d9ce7.tmp
Size 1KB
SHA256 bbd47f73baccf676f289fb49784303b40c516e5035c9463c595fecef113cc952
MD5 462a1ed0d97fcacd2ce842b2553ca375
SHA1 adf64f87d025b30698cd9d83bdf53c7a1a6ddbc6
SHA512 17c921c037136eb630ae9038ee6f3b3e5eabda9655ab63b7579b5378f64823310b53e1201846dae180327bb40f0d5635e1ca874a623ca37a21db435434c96c9d
TLSH
T17A2170F783E5867E8A1196F09A24AE1BCE1D0507436C7C6589E4AF2B93F3475E00269F
MD5 SHA1 SHA512 TLSH

Submit Download

bf33d360-4349-46fc-b2b7-55719376ba89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bf33d360-4349-46fc-b2b7-55719376ba89.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

ca027094-b72e-4287-a4d7-795581ddefb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ca027094-b72e-4287-a4d7-795581ddefb6.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a3492bf092ca213f35aee96fba6c5ef8cd99e0c2182b7de98780edfc2c90e34f
MD5 d8c232f45c0f22bdf216c761d48f7f2f
SHA1 a66235baa52d34d666df84c506c0485e0fd8207a
SHA512 22d7084f33f2a63b2c2686a077d19c40e9b9f2e8f4fb3493e06fdde067d1fa64b96d148220437363429e4bed68db5b610edfec05e20b6820fea5da82d234d108
SSDEEP 48:K0Gh8g+kkdbofQIS4dK9c1edx2NY3IkmyLUjiu8+SbbiRqISGbK9i1wbxULY5aq/:KI9KK+wKODKKgIrMAKx2a2
TLSH
T144911555397B132138BD35885668866E025231B73364E6AB7BBC45B2CF2FD190CFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3944059-b187-42fa-8754-f85564166b36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3944059-b187-42fa-8754-f85564166b36.tmp
Size 10KB
SHA256 0d69a86fd301299f21fe71fe3a23099c014ead9c4ff9935d15d7b72fd20a60a0
MD5 0bf221976bd0421f94ab7e07a7398324
SHA1 17e38ea602f90d57290473149d045ec0c8bd6b23
SHA512 b03174e72600430bfe7352cf4ca2d0cf713346a913ede4de203e8f870482aae7c73cfd8c02a750ff58f8b07e8fbf08f79fd8abd86fb77b317e2774716e6f316a
SSDEEP 192:sxZpRxWx/fWsxInhJIdpdZHW6+WNGYapR4SPIg5mJ:sxZpGx/fWs2nQLHbGzc
TLSH
T17622B7526E28A97B8CC7E20DBA55BF13D6F95032A0951E88A6FCCA1C04E76DD1247C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e67c1475-76e4-41f6-9398-f57e1d76f14b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e67c1475-76e4-41f6-9398-f57e1d76f14b.tmp
Size 10KB
SHA256 b7eea929ad0bb2be0719f748af02961e1ffa71f53bfc33c1aea485a861fbffc4
MD5 f855ca38284a764f0aaaa64fda5a9345
SHA1 75a65e8118c77b9f12f939ef69ec276c9fb28008
SHA512 889ac3aaa297ff1ab71535996cb36dcf49b801e343de11c35a403f69e6e428f0c90453593df0a4bda60a148a03902a56e32b4de49e6491f746a2ff2111bd5ec5
SSDEEP 192:sxZpRxWx/fWsxInhJIdpHZHW6+WNGYapdLMPIg5mJ:sxZpGx/fWs2nQ5HbGOc
TLSH
T17C22D8526E38A9378CC7E21DBA55BF13D6F95032A0951E88A6FCCA1C05E77DD2247C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc4594e4-0a71-4243-9ec7-398a314bc96f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc4594e4-0a71-4243-9ec7-398a314bc96f.tmp
Size 9KB
SHA256 03c0bfde11c5ecc346ac785cde581d17fc268a8fd2db8eae4017f692871065ac
MD5 fc1a772ca4b4adc78db3c22780b4ef22
SHA1 57119898712da90a74899e878112b1e7ac35473e
SHA512 ee8f789714823499167a0f1d2aeec4a12ad2183f6b2f68bb24f045102ee4ac5a6efa1dbbf62ca1f9deba5629091b58bba9724ec087943ff4c0dc6514f336c4b0
SSDEEP 192:sxZpRxWx/fWs2JnhJIdpdZHW6+WNGYaplgSPIgrJ:sxZpGx/fWsAnQLHbGP9
TLSH
T1C822A7526E38A93B8CC7E20DBA65BF53D6F95032A1951E88B6FCC91C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77e701c8-94dd-4a0d-ab9b-b537458bdeee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\77e701c8-94dd-4a0d-ab9b-b537458bdeee.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

beee593d-e7e9-4203-bad1-c740cf4cce26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\beee593d-e7e9-4203-bad1-c740cf4cce26.tmp
Size 8KB
SHA256 dad8e173f101b0772e3d6c2c23326d248a5c5de5bd1e9f35e2dbeaef2d393f25
MD5 b4c87f3f418f020a98b3132cffe38539
SHA1 0b7d26c53e010b01b1306d54aea2dae9a8a18cbd
SHA512 348ba8441e5700b7448eff90ddaf8a8ac9a0686df59f9cfdaf59d666d0e8a42542b02306d5132b394e40626ddd993de8b88b08837b995de3c03a9674005d34dd
SSDEEP 192:LONv6IEZQmiUydlTzuIGmApjzor2Ro0eIXXP27HlrqLU6:LONv6D3QzuIGmAl89IXcH2U6
TLSH
T11312E832ACB8BC6B5EE3A944F48635239DA54127E789AF50D6DC5E1C00DF25C134A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb0f21a5-9edd-4167-a962-432f4bf5957e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eb0f21a5-9edd-4167-a962-432f4bf5957e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 acb3d4e9e2a2b86d2dec894163f4595d2abfce02462f287fd19fc380e8f722f7
MD5 da853ac8decaa6dd96f1b62cf3781712
SHA1 59c27219d80692b9c99d383135841690e6ffb418
SHA512 e8dbd21ebf22ab3a4b6eaa5e334d1c873546d26ee33cd732fd07d10c12fa93f0e712eca654c52468236aadb17df4dea17df0c4dfda32731cbc92513b5e28885e
TLSH
T1E741285DBAEA1148B3B36E569BF3A86D487ABD372E06D59D10010E4E0A73A40DCB1773
MD5 SHA1 SHA512 TLSH

Submit Download