aa52ae21638ae7e2c2151d5e2dd0fe932f035ad0925dc29272dfcb8aef1d00be

Analysis

max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 06:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ind-0717.html
Size 5KB
Sample261023-heflvsas4y
SHA256 aa52ae21638ae7e2c2151d5e2dd0fe932f035ad0925dc29272dfcb8aef1d00be
MD5 3411c0f5435b66155bbbbecb2a33c51c
SHA1 8a51559a64bfe57faa7d6ca814aab84a8afea18e
SHA512 9bae49283dd0ff585dfee5551dfd0d9fcf1d494c2127453d6a2e207728a07736b690c8d7ca6087941bbe50ae3aea11e70901483b36d372552680b605b6a742f6
SSDEEP 96:PNyx0toXZzIEb0EaW875cec5G0j098gEBLTHW2fMcbVYzueh8A0Kmw:PNq0tkCB5teGE6Et2GM8yyiAw
TLSH
T1EBC16DE7F571902BEBB5FFF650B3B38D9215B249E700808CE566C41D86CEF098398098
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4784	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{890F96C7-EE78-4ADD-991B-D133DBC1D221}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1820	msedge.exe
1820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 4464	4768	msedge.exe	85
PID 4768 wrote to memory of 4784	4768	msedge.exe	87
PID 4768 wrote to memory of 1980	4768	msedge.exe	88
PID 4768 wrote to memory of 1980	4768	msedge.exe	88
PID 4768 wrote to memory of 1980	4768	msedge.exe	88
PID 4768 wrote to memory of 1092	4768	msedge.exe	89
PID 4768 wrote to memory of 1092	4768	msedge.exe	89
PID 4768 wrote to memory of 2152	4768	msedge.exe	90
PID 4768 wrote to memory of 2152	4768	msedge.exe	90
PID 4768 wrote to memory of 2152	4768	msedge.exe	90
PID 4768 wrote to memory of 2016	4768	msedge.exe	91
PID 4768 wrote to memory of 2016	4768	msedge.exe	91
PID 4768 wrote to memory of 2016	4768	msedge.exe	91
PID 4768 wrote to memory of 1404	4768	msedge.exe	92
PID 4768 wrote to memory of 1404	4768	msedge.exe	92
PID 4768 wrote to memory of 1404	4768	msedge.exe	92
PID 4768 wrote to memory of 4596	4768	msedge.exe	93
PID 4768 wrote to memory of 4596	4768	msedge.exe	93
PID 4768 wrote to memory of 4596	4768	msedge.exe	93
PID 4768 wrote to memory of 1120	4768	msedge.exe	97
PID 4768 wrote to memory of 5080	4768	msedge.exe	98
PID 4768 wrote to memory of 1120	4768	msedge.exe	97
PID 4768 wrote to memory of 5080	4768	msedge.exe	98
PID 4768 wrote to memory of 3948	4768	msedge.exe	100
PID 4768 wrote to memory of 1576	4768	msedge.exe	109
PID 4768 wrote to memory of 4780	4768	msedge.exe	110
PID 4768 wrote to memory of 908	4768	msedge.exe	111
PID 4768 wrote to memory of 4628	4768	msedge.exe	113
PID 4768 wrote to memory of 4628	4768	msedge.exe	113
PID 4768 wrote to memory of 3884	4768	msedge.exe	114
PID 4768 wrote to memory of 3884	4768	msedge.exe	114
PID 4768 wrote to memory of 1820	4768	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ind-0717.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,17125808637095130516,12190973648467874115,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,3818130019343083818,1041662765254294487,262144 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:2
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,17441431804637833716,4172628757743764260,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=2980,i,7397034704822843215,13750612992794621931,2097152 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3372,i,4642119193599880969,17167850667001114793,2097152 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,6681476250187650245,18168570775271649595,2097152 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,6432323158963002587,5444619142179205328,2097152 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,17070438457435905171,1287535170665702747,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13957831273692829270,6325563850569557497,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2157495601791313621,18431447819777406242,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2157495601791313621,18431447819777406242,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,10596017895466148632,6712890322710930605,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,16625543006404001312,4734349860490458796,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,8555577011267003910,9366405543875858431,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,15957101153267510630,9448548024044189108,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,3532370008409545663,315200829696376250,524288 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4364,i,2033644346063328127,3847515027556520988,262144 --field-trial-handle=3004,i,11830280459262271837,11974245088830967482,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1820

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7e3ad00d-013e-4d72-8ae0-ea27656fb295.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e3ad00d-013e-4d72-8ae0-ea27656fb295.tmp
Size 8KB
SHA256 af60b8f65fd909939335781ce5b7ff525ffd533463f1a95fadb56424fea05789
MD5 759f278eeba239ca1d7c8fdf0b2548a1
SHA1 9404adb39b514322e185811bb38db8647489ab07
SHA512 90bf72c23d46748b0b7a0758a578ee338b62d5a3e5b262019a7ecf7775ab3b2594be9dc84b03e652095e538503cdadba7b77ab5b36b3c220e777bd024397a973
SSDEEP 96:KqONkGQsjpfbUmjH5ih/cIPURHl8h4otop5gaDhBKP4v+Y1xf//ojdnx/yw8eBCA:BON+6JUm0QmiUyZXso//aywNBCZp6U6
TLSH
T17402C738BC687CBB9EF3AD45B44777139FA4106BA6916F84DAD91E1D01D725C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ffa8474-2d2a-42fb-a523-bb347bfbf695.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ffa8474-2d2a-42fb-a523-bb347bfbf695.tmp
Size 8KB
SHA256 925445f72cd649819bd0a3a4949013f9068040152b198ce3f07ecd9035388b66
MD5 54c6567aed25fef6a7aaf1fea3ce7e75
SHA1 b31acacd6c1d9c23af0d8672a76072e599020f13
SHA512 e5f3ea1551bf6ab10757b10fc491759afcb3446c814883d571a3cff499252a93d7b8dc7c9d549745211c2d5e3e2a725d5f8ee24dd081b2575ad055d34280c806
SSDEEP 192:QONK6JUyQmiUy+FXUo//aywwQNxZuqE2U6:QONK6+uZUo//2w6HU6
TLSH
T1D6120835B8A8BC7B5EA3E894F08736139EA44137EB896F84D6DD2A1C01DB25C530BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

6143fd9d-27c2-41ce-993c-46aa5e33253c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6143fd9d-27c2-41ce-993c-46aa5e33253c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

932a5433-7110-42fc-9ebf-893c825d442b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\932a5433-7110-42fc-9ebf-893c825d442b.tmp
Size 9KB
SHA256 7f651d60693ff592923a4584e69bad111af45d7be4a569f35aa566b77f9ae401
MD5 17fb82e0813237f93914660b12a02c7a
SHA1 c5e95ed3d24484df93b985018d660ef84a627dec
SHA512 4644c6ee244cbae80e783eedb690ee8fbb5a274f4fdf2e9ca069b91b91d9290cfcad6e47b75f8339937f5697e967af20ddd2f73c26017fdb8e2ea6e63fa800e1
SSDEEP 192:sxZrRjWh/fGsptIdpd8HW6+WNGY36WVi+gIgrJ:sxZrIh/fGspOSHbGXhv9
TLSH
T11C22C8516E28B97B8CCBD20DBA25BF13D6FA5032A1D51E58E6FC851C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c107745d6b2030df822a3d619bec72b12f1a3b458d8c952237e2bc06afafee1b
MD5 bb8039fe1e8ace09a52b6ebeeb8ca7a2
SHA1 b189357ea8339cc77ac3f2c50f79a9968fb9f548
SHA512 feece3510f374528eb79fb4bb367599a46bba8d8aba07060ebdfdd65ef2905ed4c1fc9bf940e6d0ad898f265f54fb52088405ae0de83d3509dfd33565ab97d1f
TLSH
T1BEE0268517CAC26EE24C749702FC434DD3D3266ADAC06E2E1B04DAC87046840A682791
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 8a63b885580d0a53ca8e686ded7428bbd4bd26ff547b9f6559550ce64d8514fe
MD5 3d36e5762d5132f2476116554172f82a
SHA1 22fd3293e4c365e1b95a01fe757f6e8c87eaf63e
SHA512 1e4971d54ff9fa9987f25e8be8367f221ad8ab7bda8ea069da113bdec11ac219b500acc4653b53a2aea6995ad90daf6c45ec120ec642cd089602a73c1757a7fb
TLSH
T1AF514CB1F6ED74C4F75C903997E001933F34B6C196B32E4A1EE4DBB408CA70D805028A
MD5 SHA1 SHA512 TLSH

Submit Download

1a3640c6-008d-45af-83ff-75604533591c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\1a3640c6-008d-45af-83ff-75604533591c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0193746b-582d-4274-a513-ebfdba1b9c7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0193746b-582d-4274-a513-ebfdba1b9c7c.tmp
Size 949B
SHA256 04e9076d7d1a40cc23b044f95f934cc8228cb839729799744e2bb319cb519cf8
MD5 57f313545f82be7c448ed4a0f33e1b17
SHA1 92853f5d3c478d814e4cfd3c5d2fccf273fb4f88
SHA512 6a2abf6f8b08dd35cc39d6f3bcf0b0d4da75fae4c56af97946dc9b21055c90918d613945e83e72b58fbd3e3f4af24ecdadd74cae2beac5c4323e0d425836874a
TLSH
T1ED117DB3C7E5856E890556F06A24AE2BCE1D0606422C7D25C9D4EF2B93F3475E10155B
MD5 SHA1 SHA512 TLSH

Submit Download

3a271ca2-48eb-4f46-837d-5c8f1316d3ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3a271ca2-48eb-4f46-837d-5c8f1316d3ff.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

494fcece-f9e7-4193-8b2f-14ababca44f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\494fcece-f9e7-4193-8b2f-14ababca44f2.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 103c5ed9763ccde63c92eb8069e6fe0618e6605fb409ea017c64ba191b7a281d
MD5 fe07154a04f6de3cb9bf5f5f05d92169
SHA1 75768d16f89d95590f35747d61a2d51785987426
SHA512 781ae90294f314e2b64553e74edbec60d2174e203176d562e80e70aa7cd242c70a2c1366b10bc91bae959a9996945c6c6ba5eecc2f34f77895c455ca17accc9e
SSDEEP 48:K0wfWaAqefbWt2ISyfK9O1UfxoPYVGuuyLb5bIbVbpbzb3bLbkbb3bSbPISbBbkL:K4fSKcYwKOoKXqoXKKs4qt
TLSH
T18D912111727B160139BD365846B6965B828231F23018ED3F7FBC50E55E6EE440EFE6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae38b190-ff4a-45a4-b6b1-1f3ae516a079.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ae38b190-ff4a-45a4-b6b1-1f3ae516a079.tmp
Size 10KB
SHA256 545819ffec2be78e13a17ced5ec510c9b11bd7cff24d2ded7f250ef5f2da7b70
MD5 436d1154d25daff7a0eb17d75f452cc0
SHA1 d36257946a977ad0124042e6221de5a8d78e54b9
SHA512 dc9f04716668cd4f99236daeed6157d7d7753852136a220c19b3cbfd7d6d65c9bcb026e7f24340f3c5c0592bb8f2a9150783b12fcf7520f9193358cc597fe589
SSDEEP 192:sxZrRjWh/fGsBWtIdpd8HW6+WNGY36WVi+gIg5iJ:sxZrIh/fGsBWOSHbGXhvc
TLSH
T1C622D7516E28B97B8CCBD20DBA15BF13D6FA5032A1E11E48A6FC861C05E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf461f2a-9c20-48a8-8dcb-97591da37e89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cf461f2a-9c20-48a8-8dcb-97591da37e89.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

e5a17f0b-add2-4423-8d7a-7a268a848d89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5a17f0b-add2-4423-8d7a-7a268a848d89.tmp
Size 10KB
SHA256 872fd165a5b8559ca96aa54dd235f2172298e9b9e3eb14607a597c18412a54af
MD5 3a0dcecc1107f52886520d244ca54908
SHA1 0bfe2dd2e232fd6477e05120f3cb320230c31c5a
SHA512 413df63147d57150cbaff6609ad2824d6f7ca5d3a1e61cf570fff204bf34ad5a13b54958f7a7cefa6c4b396ce150fb7acd739eb146cdd64f16f520c078b61bed
SSDEEP 192:sxZrRjWh/fGsBOtIdpd8HW6+WNGY36T4ti+gIg5IJ:sxZrIh/fGsBOOSHbGX9vW
TLSH
T17F22D8516E68797B8CCBD20DBA157F53E6FA5032A1E11E58A6FC861C05E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecc7d8d8-426f-49aa-bbb7-c8b8b80e3fb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecc7d8d8-426f-49aa-bbb7-c8b8b80e3fb0.tmp
Size 10KB
SHA256 6030c2e0afe9859a90b485953efed89f118fca5fba6d91fed9258d6564361f18
MD5 edf04038cd3f158007f803a32084972a
SHA1 234e1559361fb66c47911605281793f978ffff88
SHA512 f052e3798e7099f738863064b4a2438d3fd03e7dd32057da751f89c003595c8f4d6370caf8195962bdc6200cab50055933c925ebea5041bd33c93453c4c90dfb
SSDEEP 192:sxZrRjWh/fGsBOtIdpH8HW6+WNGY36/4u0+gIg5IJ:sxZrIh/fGsBOOcHbGX2vW
TLSH
T10E22D8526E68797B8CCBD20DBA557F53E2FA5032A1A11E48A6FC861C05E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faba0bc1-b749-4793-8521-f9671860b2f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\faba0bc1-b749-4793-8521-f9671860b2f2.tmp
Size 27KB
SHA256 3e42eacc70955fe8fcae1db2843673739d46cd26bf90b34934294a283d26c932
MD5 d0b25acb1b8254cdbbdec27053963e36
SHA1 01b5adab15bde29347a426d7109e02730e7d2e5e
SHA512 b8e900ccb8f049019e68a60f710adf672b12206904cdfd46dc2ace2e06b9786b7bb6d5aa930d56f44938de238dd2be619c59b4711fb48252496e7984eed14097
SSDEEP 768:ESKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Croivf:ESKlm7QWvUYe0u1ja8/L/E/Zivf
TLSH
T146C20B3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6357a251-a645-45aa-b2d8-3135494dddc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6357a251-a645-45aa-b2d8-3135494dddc1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d45ab192d2ea3c74f677e38f3e82c2548edbceb32a74ad6a9d302ab4abfde5cf
MD5 1264e325b0b3f2b14ba2611088859366
SHA1 6fc3f5443a4840f7bb13194258a2efeddf5525a1
SHA512 9adb22f534752cd3312ec8bbaccfd5746eceddf65bee9e678a82d8150ea3b6395c7174840c3fd479d797b98ac93d2bd866437bcd3a5768ab31c1b675a955828a
SSDEEP 384:SiFzQkUSv4zsNh8TUNTUlIlhCfEIbHl0h//2wPH2IjUIIl7:ZFdEUwgSfEO4/tH5QLp
TLSH
T170A26C7698D4AC7B9EB7DA80F14B32138EB08167CAD5AFA4D7CA6A1C01DB1DC1307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afd2ba95-ef66-43b5-96c5-f812986ce899.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\afd2ba95-ef66-43b5-96c5-f812986ce899.tmp
Size 18KB
SHA256 a2ac64d634f91d181914f421260cc1c00d821e29f9e04a7216dfebc9b6d27024
MD5 3f0d2e01984b05f9844a0f3e99a89e07
SHA1 3e81481915b7dc37193ca91b053c7791168dcf2a
SHA512 82d089de8b795403dacc0fac3dee262645397d3bb107267688967fd879e353368ce33ad396bb806fd98a14dc513cb6d3bd3368bd05a9bda71342eaf288be7726
SSDEEP 384:NQkUSv0sNAUSCfEIbHl0h//2wzH2IjUIIl7:302fEO4/lH5QLp
TLSH
T1CF827D35A8A87C778EA7E590F14B36038FB08167DBD95F98D6DE6B1C01DA29C1307E12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2289746-476d-4e07-b4d4-e8f36ec46e02.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b2289746-476d-4e07-b4d4-e8f36ec46e02.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f5a7e4cf-2df2-453d-97b8-a5692fb01d31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f5a7e4cf-2df2-453d-97b8-a5692fb01d31.tmp
Size 18KB
SHA256 c579f1730d233b35fdffef240bcda29900dedfc54a1a2606b9ed97adb584a5b9
MD5 be6a3d3a9032e7a855d44b2594f9967f
SHA1 474eb97517d482f4f4f3db3e16eafa05eece384c
SHA512 67296dddb3ce7ad11fa78d8350ec0e0bbf9eebb7a4500a8320b1cd4429906f2a04f24d93a650171334ca7b2358377a56f4418641525fef4e2b9040b3a0ebb4a8
SSDEEP 384:rQkUSv0sNAUhCfEIbHl0h//2wzH2IjUIIl7:l07fEO4/lH5QLp
TLSH
T186827D35A8A87C778EA7E580F14B36038FB08127DBD95F98D6DE6B1C01CA29C1307E12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ddb7ca908a00c9b5272293865ac4df35c65768e04692a9eb9a6eb88f4a25804c
MD5 d5bb4988f2cf6c55723934f0da9445dd
SHA1 052b374a67994de4c033889b84856b369e7cf9ab
SHA512 5de2d6087d3cfdaac1533935d1ba45623b5310b06ce04bd3c4a8075f2502d863c8bd4aaafcacbff82778eb5a5363a4f86ada3d885f2b226fe997964fa48aa4bc
TLSH
T100413B5CABFA2158B3B76E1A9BB6A46D487FB9772E06D49D00110E4F4666B00C871733
MD5 SHA1 SHA512 TLSH

Submit Download