cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pixelui.html
Size 355B
Sample261023-hdphdacv4n
SHA256 cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264
MD5 4525b2d648f7c457a689fd96421783a5
SHA1 11bfe30ce44585a15a38e86bc094224ddfe2c08e
SHA512 94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979
TLSH
T171E0C04F4057B3474011A2907DC01291E505236B38A152F93AC09467500897DC4AA2DD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
532	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{74D73246-11D2-4296-98DC-85964DC39972}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4196	msedge.exe
4196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4016 wrote to memory of 1088	4016	msedge.exe	85
PID 4016 wrote to memory of 532	4016	msedge.exe	86
PID 4016 wrote to memory of 992	4016	msedge.exe	87
PID 4016 wrote to memory of 992	4016	msedge.exe	87
PID 4016 wrote to memory of 992	4016	msedge.exe	87
PID 4016 wrote to memory of 820	4016	msedge.exe	88
PID 4016 wrote to memory of 820	4016	msedge.exe	88
PID 4016 wrote to memory of 4388	4016	msedge.exe	90
PID 4016 wrote to memory of 3160	4016	msedge.exe	91
PID 4016 wrote to memory of 4388	4016	msedge.exe	90
PID 4016 wrote to memory of 4388	4016	msedge.exe	90
PID 4016 wrote to memory of 3160	4016	msedge.exe	91
PID 4016 wrote to memory of 3160	4016	msedge.exe	91
PID 4016 wrote to memory of 2660	4016	msedge.exe	92
PID 4016 wrote to memory of 3884	4016	msedge.exe	93
PID 4016 wrote to memory of 2660	4016	msedge.exe	92
PID 4016 wrote to memory of 2660	4016	msedge.exe	92
PID 4016 wrote to memory of 3884	4016	msedge.exe	93
PID 4016 wrote to memory of 3884	4016	msedge.exe	93
PID 4016 wrote to memory of 708	4016	msedge.exe	97
PID 4016 wrote to memory of 1616	4016	msedge.exe	98
PID 4016 wrote to memory of 708	4016	msedge.exe	97
PID 4016 wrote to memory of 1616	4016	msedge.exe	98
PID 4016 wrote to memory of 4132	4016	msedge.exe	100
PID 4016 wrote to memory of 4196	4016	msedge.exe	109
PID 4016 wrote to memory of 4204	4016	msedge.exe	110
PID 4016 wrote to memory of 4268	4016	msedge.exe	111
PID 4016 wrote to memory of 3968	4016	msedge.exe	113
PID 4016 wrote to memory of 3968	4016	msedge.exe	113
PID 4016 wrote to memory of 4196	4016	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\pixelui.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,5937997678674794608,1704150164196244699,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1900,i,15726452201456348142,17921943642923649387,262144 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,1552304919005575805,1654630769221963704,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,9442855653561620811,4770314369009056313,2097152 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,15955934116636520189,17863394853362603075,2097152 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,13769983536624602767,15379293501522840559,2097152 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,15922456811443654325,8226837904338584314,2097152 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,11235218429963940629,12890541586771363126,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,774847014648374353,13359667255682021275,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,2592530392258152079,690995564770855739,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,2592530392258152079,690995564770855739,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,1538617804897352148,6588727711021053408,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,14759035228520971801,11616714509778767977,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,6794424254607836801,920716243768839089,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,16640106895756049955,10548909517243648147,524288 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1048,i,15856385165469291821,12679975414932380153,262144 --field-trial-handle=2308,i,7236247303718671428,18376122570991775721,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4b9aed6c-d900-406d-8c24-93b6aa9a4c5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4b9aed6c-d900-406d-8c24-93b6aa9a4c5d.tmp
Size 18KB
SHA256 8a8c511af90c1fd6dfc6e51dddc1d87ac1948586970551e96feed430b60c6883
MD5 a9e75da0f667dd86ed2b369820bff243
SHA1 660db98dc6a66d777fcfea4f07d2c9a3581566ff
SHA512 e6eb8cf7164ed462d9590b9a91b5b6b91c8e12dd627887534c66f4e0a941afef7a76858195919a4a3a802852ff5f4fe3df2bafbb2e64c6c3286e177bb0b9ec3b
SSDEEP 384:iQkUSv0sNmzmbFd2h//2w/MlxNFskrIIlD:a0mG/ZCzFsiLJ
TLSH
T14D826C36A8B4BC7B9AE79550F1473603EE608127D7D92F90DADD9B2C01CB29D230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5875a775-4aae-4878-ac19-a81fb37874e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5875a775-4aae-4878-ac19-a81fb37874e2.tmp
Size 21KB
SHA256 ec207a40052d0cadb64ddb24cc51a29b87a9505f946828698137224446982729
MD5 abee4327f038ee2e675d7cf37109c9c1
SHA1 63a7c2676c45f8d46e8af013146d0b2801832674
SHA512 62fe9b0c746d9ea8de83675a6e4cc2bd3d14a44bfe8d86b7d11ae34678ab7578218de5ff02a7a030d83d176f78cd9c1e179056b85a4b407faaafb9d0c605bfb1
SSDEEP 384:giFzQkUSvdzsNm8TUNTUlIlzmbFd2h//2wbMlxNFskrIIlD:7FdlHwgOG/hCzFsiLJ
TLSH
T11DA25B3798E4AC7B9EB79A90F54A3203DEB08167DAD56E90E7CD9A1C01CB1DC130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5dcd407f-c58a-41ff-80c1-935477b10d80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5dcd407f-c58a-41ff-80c1-935477b10d80.tmp
Size 8KB
SHA256 3ad616287ede3e1564cdf955c7d9f63e64264383a7d3ae917cd76f85972ea517
MD5 e09f66f9a165ec5afa823fd37d9ea9a4
SHA1 05265dcfd0190b6b507b1b04bc21603007cff5a7
SHA512 c45aab7c39558afaa5c430dde3515fde06b48b6c41ad2811fdee012d852682ed8c22cc72fc2875d078e21868543745dcfbb800f0f3faa25427ae3273f1a491c5
SSDEEP 96:bqONkPQsjpfbUjH5ih/cIPURHl8h4otop5ssDCBwP4v+Y1xf//ojdnx/yw8OxwLR:+ONP6JU0QmiUy/Cio//aywwINx5q5lU6
TLSH
T11C12F835B8A8BC7B5EE3A984B08336139EA44127EBC96F84D6DD2F1C01DB25C5307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

905f3933-20e1-4bdb-8da0-3f0b03f85705.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\905f3933-20e1-4bdb-8da0-3f0b03f85705.tmp
Size 8KB
SHA256 6e78253a5c0ec311fb083deedb3a72cfcf3d3e174386a8d833358d1aec1bcca7
MD5 f3122906d112eccbbab667c0ad864317
SHA1 e68fa6fba9a45ceb9f1d5ee5435bf8fe85cc81fb
SHA512 4afc92387baf46637d28246bd8681969eaa6770147b3dc32c486416261fc962534cb9fbeb8cea55f29f8222754c0402220a45820ccf673a4a59624b4505e05e8
SSDEEP 96:KqONkGQsjpfbUmjH5ih/cIPURHl8h4otop5saDCBKP4v+Y1xf//ojdnx/yw8eBC3:BON+6JUm0QmiUyNCso//aywNBCK6U6
TLSH
T17D02C738BC686CBB9EF3AE45B44777139FA4106BAA916F84DAE81E1D01D725C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

30cbc39b-8379-42cc-9d02-6f23dea1f05c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30cbc39b-8379-42cc-9d02-6f23dea1f05c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f84f296-d0ea-4de8-9024-ec6c9b1a7ca2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f84f296-d0ea-4de8-9024-ec6c9b1a7ca2.tmp
Size 10KB
SHA256 89c3c8b8f8c14c5a462d75d08ab05faf4d8844519985ad0b2f064feef161cfb3
MD5 bfedc6aa837ce11b6fc6b8e862a331d8
SHA1 a5713168a27e615b0ff65f91df185e0abf69e6f5
SHA512 f6b70744bc2c4d908854fc06d07937804b102bbae1a9ea15e16eb69122a890b32762e2a880be9dbe84f7cae3de746a7ddeb1400e13708e8eb0b31c62e063fd78
SSDEEP 192:sxZPRAWq/f/stOjIdpHnHW6+WNGY36j2UbIg5aJ:sxZPNq/f/so8HHbGXDg
TLSH
T17722B752AE78693B8CC7E20DBA15BF53E6FA503291D11E44A6FC9A1C05E77CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

659c65f2-b59a-4c0b-9ecf-4f08270be860.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\659c65f2-b59a-4c0b-9ecf-4f08270be860.tmp
Size 10KB
SHA256 d06a0b56c64d527ac951310dbe1b5befb5c88e217cd265f98f12c596d408c4e0
MD5 0b091c2458b18b2ab6d58a605c54f8ab
SHA1 df9fa4118efdca15ffbb9a62dc4e5a02c39dd00c
SHA512 bdeceeb5b3e1ebff2f97dd9bed92197528a2cd55ec01f81ee1943b8b0cfed2439c05927c9a59b49e6152bb4727ea0f7cbc5bf08e19de904af10e3af64a2411b6
SSDEEP 192:sxZPRAWq/f/scOjIdpdnHW6+WNGY36WdvbIg54J:sxZPNq/f/sP8hHbGXmi
TLSH
T1FE22C851AE78A93B8CCBD20DBA25BF53E6FE503291D51E48A6FC9A1C05E67CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bfc5210-b576-436f-a602-1569d0402fc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8bfc5210-b576-436f-a602-1569d0402fc2.tmp
Size 9KB
SHA256 767a20874fa31337a394c31235ab5565f7ff349113c24462558f3f80afe73e1b
MD5 8f2395e721968efef05181b4b6a56df4
SHA1 87aab95fbfa7e36bdae1488e3437c1861fdf9326
SHA512 9c89661c8bf847c7a57224dd7383b49aeffe593e6fca1979cc3e9cbe41482dd2c64bb96f231eb02dab46797f38f9227154dac97dc04ecc630c599332744b7a0e
SSDEEP 192:sxZPRAWq/f/siOjIdpdnHW6+WNGY36WdvbIgrJ:sxZPNq/f/sB8hHbGXm9
TLSH
T11122B851AE78A93B8CC7D20DBA25BF53E6FE503291D51E48A6FC861C05E6BCD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 184431910bfef3035390249ea5852cd382f1ef06ca7fab000afa6abff015a005
MD5 dc5733155d1d84be651c35a7bc9c2c96
SHA1 9602745e519f884ad27f5462fbcdd96c6a3b61b0
SHA512 efc94906e8788ecd0c75f70692061eee57cca075735497d0d775a83a397dc8735e918cb37c186004feb4f9057a51021987e9009eb19671fa36d47a6da08c34ab
TLSH
T1EF514CB1F6ED74C0F75C943997E401933F34B6C19AB32E4A1EE4DBB408CA70D801029A
MD5 SHA1 SHA512 TLSH

Submit Download

4cbf7f9d-978e-4314-9238-e1d6e7ee3f6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4cbf7f9d-978e-4314-9238-e1d6e7ee3f6a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e878dd5-a3cb-4c6b-a679-e75031d7445b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e878dd5-a3cb-4c6b-a679-e75031d7445b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

45763c33-b3a2-42dc-975c-883d793245d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\45763c33-b3a2-42dc-975c-883d793245d2.tmp
Size 949B
SHA256 45c361a082a4a9bcbe3b0e8ecd1e21e357c55a34c1eb4283922c5a845efb13d3
MD5 7945d59b46c382dcdce5d808755899e7
SHA1 0e7b453aa76ddf2b4c9059b97a33f23f9c1d7d22
SHA512 45e0a1ef2d9e79fed8d532d02210dbf51cede9687d8d7a7188386867fa6aa2dcbb1c8c8356c9b88fb8a7786634fac8845b94b35c2a24c14429e1060421917f38
TLSH
T1C811BDF3C7D5856E890156F06A24AE1BCE1C0505422C7D29C5D4EF2B93F3079E10159B
MD5 SHA1 SHA512 TLSH

Submit Download

73a6cd69-9831-4f8e-8b75-1185008190ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\73a6cd69-9831-4f8e-8b75-1185008190ec.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d028e121b57722021d427f24fd7d6157ec37c48cfe343bba893f13384c04e06a
MD5 ff3111bd67143676a8a21a7b871a586e
SHA1 77027749d4bda5c57c39ad55d8987ec5a3ce0c84
SHA512 b0db3acadbb2ad58e1df39523675df5d7b2030d24564edcc23ce7e17f934bde77e2285bb73e75ccfe6d0cd66d2b06f66d62a202cc958ffb3693dc85d12c0dff6
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGuuyLb5bIbVbpbzb3bLbkbb3bSbPISbBbks:K4fSKcYwKOoKXqwrKKQ4ya
TLSH
T1AB91310431BB160578BD2949457686AB869232F33059EA2F7FBC50F14E6FE050DFEAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5c625b5-b54f-44d3-8a30-8ddf7c8ff01d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5c625b5-b54f-44d3-8a30-8ddf7c8ff01d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

dc297b42-bf28-4613-8f90-a28cd72b2542.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dc297b42-bf28-4613-8f90-a28cd72b2542.tmp
Size 27KB
SHA256 e45ee219b233a2d5cc61905116dd19ee465e8b7442b6a73dff99921b29a6059a
MD5 0aa5c9f7db891e9895d050e88370ae1f
SHA1 397bb72b89096d5efc5185e3de1e45fe4d51d4f4
SHA512 86afd6582186c923a243dafcbcc445853e4d372fabb039df73f7318732bb629e3d8cd63341075da74a868f01d9e2b160e7ef2683919d9428882f0a716b25cded
SSDEEP 768:vzKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/VroXO:vzKlm7QWvUYe0u1ja8/L/E/uXO
TLSH
T1D3C2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de0275c3-ee6a-48c8-9153-f9a51df89d3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de0275c3-ee6a-48c8-9153-f9a51df89d3c.tmp
Size 10KB
SHA256 0cecd6895a472e79e6f907dd82e67c36c393bd7ea4a39564e241bd211b999351
MD5 0fb0a46c64dd32622447e2ad51539e35
SHA1 438e63b7b5c3032985f07d299598f3ec02be8450
SHA512 78f6accbc617ca28157a125cc1b1b80fdc832538ba57db712c286c3e8c724781f132135801e0f4ae0c2b77ed8a3bdc332b82e74901da4251e1c8e56b862d2395
SSDEEP 192:sxZPRAWq/f/stOjIdpdnHW6+WNGY36JlvbIg5aJ:sxZPNq/f/so8hHbGXzg
TLSH
T14622B751AE78697B8CC7E20DBA15BF53E6FE503291D51E48A6FC8A1C05E67CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06cc3739-081e-431a-bf9a-91e02853dbf1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\06cc3739-081e-431a-bf9a-91e02853dbf1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cd12f1fa-3b79-4e82-871d-c2c74a49d36e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd12f1fa-3b79-4e82-871d-c2c74a49d36e.tmp
Size 18KB
SHA256 b42eecd9f901d284903167fbab17b222da22d655cbc77432c19fe09f9ac22282
MD5 b317dd2741228bbfa97f6cff8309b3fd
SHA1 942b08f18a67c3a0bca60223c17b0cc842f15fdb
SHA512 4bfaf1bea2d0cecb365497432ecb81b1397864338c3855a18491723b45040e176fc26428c3a5ae5f1888d885bd064b941e6f1430a0430941a958538e7e9dc3f1
SSDEEP 384:tQkUSv0sNmmmbFd2h//2w/MlxNFskrIIlD:X0hG/ZCzFsiLJ
TLSH
T1C3825C36A8B4BC7B9AA79550F1473603EE608127D7D52F90DADE9B2C01CB29D230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dc6ae3ee-9365-4661-afef-49e60fa097b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dc6ae3ee-9365-4661-afef-49e60fa097b6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c4ae0775eb1a1e83cc0d3c9a9d432842aa8d946e2f4d9947126b59ea57fb86b9
MD5 067d354caa95cc733470754d4b361940
SHA1 a96a3475b18038f222faf1f1ebfb2779d207d526
SHA512 5275b2c9e8fb9c7f636fe1a7afc587123be57e0983f1a4bca379ad29e52e5d519f511b6815681022fc78d7cf9dbb123f6b442320c8765a2c1cae48cb114ec93a
TLSH
T18041149CB6F90118F3B76E56ABF7A86E447FB8371E06949D10010D4F0A23A45C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download